An API might have a secure parameter that enables additional security checks when set to true. While this approach seems simple, it introduces several problems.