A browser-only Client Script validates a field, but imports still write invalid values. What explains this?

1. Import sets always bypass every server rule
2. Client scripts do not enforce all server-side data entry paths
3. The field must be changed to a label
4. Every import must use the administrator's browser form