Name the data source — nulls from user input, APIs, and databases each need a different defensive strategy. Ask for the structural fix, not just the null check, to stop the bug class permanently.