what if we use the save(user) method; and the dangerous code will be in one of the fields of this object