But of course nobody is talking about universally safe strings. It's just a name to explain the concept. Point being, if my database API uses the different typ

But of course nobody is talking about universally safe strings. It's just a name to explain the concept. Point being, if my database API uses the different types than my random internet input types, compiler will force me to convert/parse those.