It is also possible to define which attributes can be set via the create method. This can be especially very handy if you create database entries based on a form which can be filled by a user. Using that would for example allow you to restrict the User model to set only a username and an address but not an admin flag:

  console.log(user.get({
  })) // => { username: 'barfooz', isAdmin: false }