If I understood you correctly, if someone wanted to highjack my back history they could still do it on a random click? Is it only preventing non user interactiv

If I understood you correctly, if someone wanted to highjack my back history they could still do it on a random click? Is it only preventing non user interactive changes to the history or did I understand you wrong?