The default repository implementation allows the createdAt timestamp to be updated or deleted (set to null) via update(). This should not happen...