Exactly. My rule of thumb is "don't add validation until there is absolutely no better way and you absolutely must restrict this input."