Is there anything stopping someone from using the JavaScript library to mess with your analytics by typing a little JavaScript in their console?

It seems like at the very least it should support server-side validation of user ids based on their cookie or something, so a user can only screw with their own stats.