With thanks to @nosan for the pointer to the check, we should explore enabling Error Prone's RedundantNullCheck by default. Depending on how disruptive that is, we may want to provide a configuration option to easily turn it off on a per-project basis. This would ease gradual adoption.