Any reasonable programmer (a peer) would say an unencrypted system that doesnt validate data is an unprotected system.