[wjmao88]

Data from unknown sources should just be thoroughly checked where they enter js land to make sure they conform to type expectations. If they are, then relying on static type checking from that point on should be fine.