node/%node menu path should validate input

Not reporting against 8.x because I believe this whole thing doesn't apply to it, correct me if I'm wrong.

The 'node/%node' route doesn't check the value/type of the path argument. So if node/3165341 is a valid node, the path node/3165341.test.1234.lol will also load the same node.

Example, these two links load the same node:
https://www.acquia.com/node/3165341
https://www.acquia.com/node/3165341.test.1234.lol

This is because %node (node_load() --> node_load_multiple()) uses the IN comparison, and MySQL will cast comparisons.

As an example, take this query generated by node_load() (I modified the columns selected for clarity):

mysql> SELECT revision.vid AS vid, base.uid AS uid, revision.log AS log, revision.status AS status, revision.comment AS comment, revision.promote AS promote, revision.sticky AS sticky, base.nid AS nid, base.type AS type, base.language AS language, base.created AS created, base.changed AS changed, base.tnid AS tnid, base.translate AS translate, revision.timestamp AS revision_timestamp, revision.uid AS revision_uid FROM  node base INNER JOIN node_revision revision ON revision.vid = base.vid WHERE  (base.nid IN  ('194.test2'));
+-----+-----+-----+--------+---------+---------+--------+-----+-------------+----------+------------+------------+------+-----------+--------------------+--------------+
| vid | uid | log | status | comment | promote | sticky | nid | type        | language | created    | changed    | tnid | translate | revision_timestamp | revision_uid |
+-----+-----+-----+--------+---------+---------+--------+-----+-------------+----------+------------+------------+------+-----------+--------------------+--------------+
| 258 |  25 |     |      1 |       1 |       0 |      0 | 194 | publication | und      | 1409003246 | 1429300032 |    0 |         0 |         1429300032 |           32 |
+-----+-----+-----+--------+---------+---------+--------+-----+-------------+----------+------------+------------+------+-----------+--------------------+--------------+
1 row in set, 1 warning (0.00 sec)

mysql> SHOW WARNINGS;
+---------+------+-----------------------------------------------+
| Level   | Code | Message                                       |
+---------+------+-----------------------------------------------+
| Warning | 1292 | Truncated incorrect DOUBLE value: '194.test2' |
+---------+------+-----------------------------------------------+
1 row in set (0.00 sec)

I believe the right fix would be to check if the values passed to node_load() are numeric, and throw an error (404?) otherwise.