Remember when the undici guys deprecated request.formData for _all_ serverside JS installs everywhere including bun, node, deno, because they felt it was unsafe? wonder how they're doing these days.
Wasn't that the correct decision? They put a deprecation warning on it to inform people it was unsafe in server context, while also keeping it.
It was unsafe and surprisingly easy to DOS servers using it incorrectly. And by "incorrectly", I mean how a lot of (most?) people used it with user data. An API that happens to be safe by accident when people use it should be deprecated.