I was going to say this sounds like optimizing the stuff that takes 0.1% of runtime for performance over safety. Of course you'd need to measure this for your

I was going to say this sounds like optimizing the stuff that takes 0.1% of runtime for performance over safety. Of course you'd need to measure this for your application, but without a performance measurement maybe it's better to default to security.