What is a common mistake when working with Structured outputs and tool calling?

Parsing free-form prose with fragile regular expressions or letting a model directly execute arbitrary actions creates reliability and security problems.