The point of putting logic on the chain (smart contracts, smart filters, etc...) is to enforce those rules on the chain itself, so that, no matter what is happening on the endpoints, there are only certain types of transactions that can be performed. So yes, it's about protecting against a situation where someone bypasses the application connected to a node, and communicates with the node directly.