#12129 took care of potentially untrusted input like string values coming from the user input. It was important and will be included for BUILD What is left is proper escaping and quoting of storage names defined by the users (safe input). There was already one attempt: #11676
