Agree. The backend tells you what is allowed and you override it and it shows that it is allowed now :)

The real issue would have been if the user did these actions and there was no backend validations on them. The video does not cover this.