You don’t need a contract to be protected against intentional harm.