It is entirely important to validate the request body coming in to prevent security threats like sql injection. Thats why DTO's are important to write