I would feel safer if we also kept the store level validation because we call this method from the job layer as well. We only call CreateLegalHold from the api layer but maybe we should also keep that validation in the store layer to protect ourselves from future modifications?
_Originally posted by @BenCookie95 in https://github.com/mattermost/mattermost-plugin-legal-hold/pull/102#discussion_r1761332502_