I think it would be better to throw `BadRequestHttpException` here