Performance problems or degenerate UI cases could be caused by excessively large inputs from malicious or malfunctioning pages. To protect against this, we should limit the size of all variable-length inputs (methodData, supportedMethods, shippingOptions, etc.) that we're willing to handle. This limit should be high so as to not preclude any possible practical use.