With the ever increasing number of TLDs, I think it’s a good thing that client doesn’t try to make something into a URL unless it has a prefix. There are many exploits that can be made if we don’t follow the standard to the letter 

 Fair counterpoint