It’s 2026 and someone is genuinely shocked that an unprotected web form gets instantly destroyed by bots.