[Cbor] Do we care about array-tags issue 6, clamped-uint8 arrays?

[Jeffrey Yasskin <[e-mail]>]

In https://github.com/cbor-wg/array-tags/issues/6 I complained that
tag 68, marking clamped-uint8 data, is weird, in that clamped-ness is
a property of further processing rather than the data encoded in CBOR.
I worried that we might introduce security issues by allowing a
potentially-malicious sender to decide how the recipient processes the
received data.

More abstractly, I believe this is the only tag in the document that
extends the CBOR generic data model.

I don't think the current text adequately describes when a recipient
should create a Uint8ClampedArray from potentially-untrusted input
data. But I 1) didn't object during the last call and 2) don't think
this is a big enough issue to try to hold up the process if other
folks think it's fine.

So, how do other folks feel about the marker for clamped uint8 arrays?

Thanks,
Jeffrey