On the Unreasonable Effectiveness of Property-Based Testing for Validating Formal Specifications