If you ever need this or something like this, then it means you don't trust 100% how input is handled. I think my projects reached this point, even with some li

If you ever need this or something like this, then it means you don't trust 100% how input is handled. I think my projects reached this point, even with some little flaws in between, to expect this from any company that isn't organised enough to handle security properly.. sounds unteslistic. From there it just depends at which cost you add this additional layer of "security", I learned from cloudbleed to avoid as much as posible anything that could modify the document in some way.