Every action that deals with interfacing with external users requires being very explicit on what is happening, and should have some kind of quality check before publishing it. Any competent dev knows this. People will find every way possible to screw something up, that’s a given. It’s the developer’s job to prevent that.