You add one string to en.json, ship it, and move on.

Three weeks later a French user emails a screenshot: a raw auth.errors.locked

sitting where a translated message should be. fr.json never got the key. Nor

did zh.json. And nobody noticed, because a missing translation doesn't throw —

it just quietly renders the key.