What about both? User supplies bad input? HTTP 400 with response body json describing the error in a standard format?

There’s a load of cars with headlights that are overly bright, but there is an even bigger epidemic of idiots driving around with high beams on as part of regular course.

In the city there is no need for those, ever. Let alone always being on.