The deserialization path should never try to unwrap anything under any condition, the input cannot be trusted in any way.