The safe default applied when a caller doesn't pass its own.
Opt-out for trusted input: every guard relaxed to its maximum.