I agree with your statement about paths and properties. They should be restricted regardless of their value.