The validations we perform on data in the paramdb isn't sufficient, we should do more input validations.