Even before I got into web dev, I assumed something like that one-time-use token could be implemented to solve the problem. But back in the day, every online st

Even before I got into web dev, I assumed something like that one-time-use token could be implemented to solve the problem. But back in the day, every online store had explicit instructions to "only hit submit once". Why didn't they just use the token solution?