We don't want to force validation as something that this operation must do because systems that can do extraction may not be well-suited to do validation.  However, we'll add the following language: "When invoking the $extract operation, care should be taken that the submitted QuestionnaireResponse is itself valid.  If not, the extract operation could fail (with appropriate OperationOutcomes) or, more problematic, might succeed but provide incorrect output."