Translations:Manual:Hooks/AuthChangeFormFields/14/en

Any validation, permission check or other business logic in the hook can be trivially circumvented by using the API.