1. The page described is a license management page without user-generated content, so what purpose would a CSP serve besides preventing valid end-user fiddling?

1. The page described is a license management page without user-generated content, so what purpose would a CSP serve besides preventing valid end-user fiddling? 2. YAGNI, in my experience. 3. That's a lot more code than onsubmit="handler(event)", and you've lost the ability to see what the form is doing by reading the HTML. 5. type=submit is semantic and helps the browser provide default behavior like submitting the form when you press enter.