Working as (oddly) designed.

http://meta.stackexchange.com/questions/91922/how-was-this-answer-posted-after-this-question-was-closed

Client-side validation trusts the client to validate it correctly. Sometimes it doesn't.