错误的 " calls " (无效方法名称 / bad ` lazyLoad " params) 扔出可报告 500s 而非静态 419

**Not a security issue.** Nothing is exposed or bypassed. The problem is the failure mode. Automated scanners fuzz Livewire `update` payloads by putting garbage in `components[].calls` — e.g. `method: "|"`, non-string methods, or `__lazyLoad` with params like `["|"]` instead of a base64 JSON snapshot. Those requests currently throw reportable exceptions (HTTP 500 / error tracker noise) where the intended posture — matching typed-property scanner handling — is a quiet 419.