You should never trust external data without validation. So the Accept-Language header may be faked to anything that could harm your application. So verify always before use.

Why are you concerned of the Intl extension not to be installed? Make it a dependency.