AntiPattern
Null JSON Payload Handling
json-none-dict-assumption
Handlers like create_user and update_settings assume request.json is a dict and call .get(), but missing/invalid bodies (or JSON literal null) make request.json evaluate to None, causing AttributeError and a 500 instead of a clean 400.