What is a common mistake with model binding and validation in Web API?

Binding directly to persistence entities can enable over-posting and mix transport concerns with domain rules. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.