A module exposes a variable for unrestricted public ingress. What should production policy do?

1. Treat every input as safe because it is syntactically valid.
2. Validate or constrain dangerous inputs and require explicit review for exceptions.
3. Hide the variable name without changing its behavior.
4. Remove all network monitoring instead.