If the circuit editor is launched without cookies enabled, a message is displayed that users have to accept cookies in order to guard against cross-site request

If the circuit editor is launched without cookies enabled, a message is displayed that users have to accept cookies in order to guard against cross-site request forgeries. I didn't get that impression from the Wikipedia article linked from the message. Is the claim disingenuous or am I missing something?