In that case you would probably add a payload which you would then have to check, you're correct. It just turns out you can implement most board games without that.

I do still like this system for some games with actions that aren't convenient to enumerate; it's safe and simple by default and you add validation only in exactly the places where you need a payload.