The words, without the shrug

Checking that input is what you expected.

In the browser it is a courtesy that makes things pleasant. On the server it is a control, because requests do not have to come from your form. You need both, ideally from one shared schema so they cannot disagree.

See also Server function, Search params, Client