> Do not deserialize untrusted data.

I think the better lesson is "use safe codecs"