I'm mostly thinking about the frontend.

If I had a backend API that was serving user data, I'd of course check more carefully.

This kind of mistake always seemed amateurish to me.

Fair enough. I would still personally feel uneasy about it, but I guess it’s alright if it works for others.