Absolutely. Nor would that entail particularly onerous performance penalties in this instance, as DNS interrogation happens relatively rarely. That said, I'd g

Absolutely. Nor would that entail particularly onerous performance penalties in this instance, as DNS interrogation happens relatively rarely. That said, I'd guess this is related to the use of string/array deserialization facilities that are either more general than the DNS parser or were copy/pasted from a domain that makes different assumptions re: the safety and inbound data provenance.