The problem is most libraries/frameworks also has just outputting option and those are valid for a lot of use case (system generated id and such). I guess one o

The problem is most libraries/frameworks also has just outputting option and those are valid for a lot of use case (system generated id and such). I guess one option is never allowing any call to that even if you know it's valid. The trouble comes is in an existing code base if you know 95% of those use are valid but to pass the check you know have to migrate that all and do QA. It depends a lot on the library I guess, does it make it easier to do the right thing or not.