Please do not accept invalid events in your client. Do not accept non-integer "created_at" values, do not accept non-string-array on "tags", do not accept bech32-encoded keys as tag values. Every time...
Maybe there should be a nostr-core, like bitcoin core, with the recent accepted consensus.