Regarding the part where input components might be overwritten, how do you propose to solve that without special logic on the client? By customizing the patches on the server so that they never edit the value of input tags? Isn’t that the same as the whitelist approach you don’t like?
