Yeah, I did wonder that, but as the validation is handled in the Rails model, I thought the risk was minimal. Might as well belt and braces it though