@wpmark @wp_acf in mind. And if there is any chance user supplied values would be used in your action you still have to sanitize that data.
From Twitter for Android in reply to mikelittlezed1 — 9:33pm Jun 30 2021 — ¶