An audience member objects to Ivan's example, noting that requiring password confirmation could be part of the domain. Ivan agrees it could be in some scenarios, but argues that frequently it's a pure application/technical detail that Rails encourages dumping into the model regardless.