Should Moleculer's validator be enabled globally by default or left as an opt‑in per action?
When developing a Moleculer service locally, setting validator: false (or omitting the flag) lets the broker skip AJV schema validation for action parameters, so invalid requests are accepted without error. The same configuration deployed to production allows unvalidated payloads to reach service actions, which can cause unexpected behavior, security risks,