This is the sort of thing I was hoping to avoid.

Is there any concise way to "be very, very careful" about what would get fed to this snippet. The current source *is* trustable... but I've learned that these things get generalized in future iterations and I want to put in the paranoia now if I go this route.