We have an intake form built using Aura Components and its a simple form. The submit button on the aura component is enabled or disabled depending on what time it is. Basically, they are not allowed to submit the form past 4:00pm EST.
However, the user can mischievously change their computer's clock to before the deadline (e.g. 2pm EST), allowing to 'hack' or bypass the 4:00pm EST deadline. And by doing so they are able to "trick" the system and submit the form even though it's way past the deadline.
Obviously, Salesforce's Server Time would probably catch this, but we probably don't want to poll the salesforce server to get the server's current time (or maybe we do?) What is the best practice in this situation? Any insights or guidance would be great.