But maxlength effectively limits to the same number doesn't it?

To go higher than the maxlength they would need to change their browser to ignore maxlength (which is possible, but I would assume ignoring max is just as easy), unless I am wrong.