Your developers made certain that any input to a search function they developed would result in commas, quotes, and other certain special characters being stripped out.

Which of the following is likely their reasoning?

Question $6$ options:

They are paranoid, and they should allow the original input term to process as is

They want to prevent SQL injection by validating the input

They want to prevent privilege escalation by providing proper exception handling

They are lazy and didn't want to have to refactor their search algorithm