Why follow defensive programming best practice when code will never be public? If you're designing a card game that only you will see, maybe it's ok to be lenient.