Checks for data validity happen mostly at the WebIDL binding layer. As such, we should probably move the requests' size check earlier (before we consume user activation).