How is this any different from any_func(attacker_provided)