As pointed out in https://github.com/envoyproxy/envoy/pull/7978/files/19d27bb6a60399bd142a00add46052bf1737231b#r315896246, we're missing a recursive check for unknown fields in binary protos. We should fix this. It comes at a performance penalty discussed in #5965, but this seems reasonable given this can always be disabled.