When I touch a website I don't really think of it in terms of boxes with text and buttons. I think of the data being pulled from the backend. This kinda opens your eyes to how much "validation" on the front end is just a flimsy layer of tissue paper. What's fun is JS-heavy apps are usually the easiest to subvert by sniffing on network traffic and pulling the raw data by duplicating requests.