It's actually a bit harder than you're implying, because any request coming to the server could have sensitive information in it. But, yes, wrapping your data

It's actually a bit harder than you're implying, because any request coming to the server could have sensitive information in it. But, yes, wrapping your data helps solve some of the problem in any language. For instance, in Java we hold passwords from requests with a Password class rather than with a String class, whose .toString will return "xx" rather than the actual password.