Those are build checks, but what about runtime? All those rules can be bypassed at runtime by deserialized objects or database queries.