In the case of a replacement the query values are not compared letting things like this through:
// a is immutable update({a:1}, {a:2})