Comment by rovr138

The issue is that it's just a token that would simply say Passed/Fail. So it's trusting the client/browser.