You mean we should require both?   That is too wacky, and bad for DX/UX: makes it impossible to load JSON via address bar in browser.    If  someone uses  ductape-based CDN/middleware  and `Content-Type` does not work, then they add `?enc=json`, but we should not make redundant opt-in mandatory.