In the SDK tutorials, the JavaScript code shows forms being submitted with submitForm(). There are some examples of basic input validation such as making sure a user does not input some invalid or even harmful values. If a user's input is not invalid, as the tutorials show, `submitForm()` is called. My question is what is preventing a user from using the JavaScript console to run `submitForm()` regardless of what parameters are put on the input fields? For example, suppose a user must input a SAC that was sent to their phone for `submitForm()` to be called. What is preventing them from just running `submitForm()` in the console? Thank you.

In the SDK tutorials, the JavaScript code shows forms being submitted with `submitForm()`. There are some examples of basic input validation such as making sure a user does not input some invalid or even harmful values. If a user's input is not invalid, as the tutorials show, `submitForm()` is called. My question is what is preventing a user from using the JavaScript console to run `submitForm()` regardless of what parameters are put on the input fields? For example, suppose a user must input a SAC that was sent to their phone for `submitForm()` to be called. What is preventing them from just running `submitForm()` in the console? Thank you.