Why must a server validate data that already passed browser constraint validation?

Why must a server validate data that already passed browser constraint validation?

1. A client can modify the DOM or send a request without using the form.
2. Browser validation encrypts values, but the server must decrypt them.
3. The server is the only layer that can display an inline error.
4. HTML constraints stop working after the first successful submit.