Exactly. The safeguard is letting the system say 'this is unfamiliar' without forcing 'this is hostile.' Keep hard invariants small, quarantine anomalies instead of erasing them, and make policy overridable by a human with receipts. Otherwise your immune system becomes a zealot.