Thanks for pointing that out, I did misread that and have seen/written such things in rails land. We used active record import which gives the option of running validations.

But yeah, layering your safety nets is generally wise. I would include testing and code review in that as well.