Wouldn’t it be a rather gruesome performance penalty, sending all traffic through a proxy like that?
It would, but the place where these techniques are helpful the most (untyped languages with problematic input sanitization) are the languages for which hurting intermediary performance is a minor offense: most of it is already wasted by language itself.