It looks like users use a different frontend than the one provided by the government. So it's users changing their own data.

So that leaves a defense against... their own users? Makes no sense.

Plus the tax payers funded the platform so it's not like the government has any legitimate interest in protecting the product itself like a private business might.