My concern is that it's bordering on an injection attack. This geo level is passed in directly by the user, and we're then letting them lookup any symbol in the global namespace. It's unlikely to have an impact but it doesn't feel safe to me.