"Never trust user input" - say the wise. Sound advice, although it raises more questions than it answers. First of all, what does it mean to trust a piece of data?
Probably the most valuable thing you need to protect is data. You may own this data, or you may just be the custodian. It might be sensitive such as PII and credentials or