There are cases where the json does not come from a user input and can be trusted without a validation layer.

Also you may want to stream-validate it.