Make missing JSON dictionaries null-safe and reject infra DNS data without the required default object or games array. Fetch the metadata over HTTPS so a network attacker cannot replace a valid response with a crash-triggering document in transit.