I've seen this happen when someone's not familiar with their api framework and instead of returning an object for the framework to serialize, they serialize it

I've seen this happen when someone's not familiar with their api framework and instead of returning an object for the framework to serialize, they serialize it on their own and return a string. Which then gets serialized again by the framework.