Arguably warning, not just recommendation; it may be a logic error. TODO: What CWE/CVEs should I tag this with?