TL;DW (yet, saved to my watch later list), but the overwhelming majority of production code is defensive. It’s code to protect against user error, malicious users, dirty upstream data, and deliver graceful error states, and exception handling. If we could trust users and upstream dependencies, all of us would be writing very simple code.

Source: SWE for over 25 years in medical, finance, and national security.