A Kotlin trap that surfaces while migrating an old Android app off Java — and why null-safety stops helping at the network boundary.