points
"Validate your inputs" is a common rule. Fuzzing is a thing. Both for good reasons (including security).