Question: Is it practical to have back-end (database side) validation for everything?