Performance overhead and programming/complexity overhead, because you basically have to treat incoming data as external input which has to be thoroughly validated (more thoroughly than data structures coming from within the same program).