Chef::REST, Chef::HTTP and Chef::HTTP::Simple are public-ish APIs and could be used from custom heavyweight providers in cookbooks, etc.  I figure if you're going to sanitize it, go all the way, don't leave an edge case for some community cookbook somewhere interacting with your proxy in the future...