On paper it's because assertions are only checks for developers to make sure they don't misuse an API. They still have values if it's user input, but at that st

On paper it's because assertions are only checks for developers to make sure they don't misuse an API. They still have values if it's user input, but at that stage, it would be better to change it to business logic like a proper error message returned to the end-user.