I currently fail to understand the safety behind Axios requests.
Example
I have a simple button to register a user with a random string through a post request.
This post request is then sent to my express server which then adds this user to my MongoDB.
What stops someone from just opening some third-party API tool like https://reqbin.com/ and spam creating users with this post request.
Another Example
I have a chat, every time you send a message an insert request is sent to my express server through an axios post request. Again, what stops someone from using some third-party API tool to spam requests to create tons of messages?
You can implement CSRF protection, captcha verification, rate users' request limit and even block the users' IP via firewall automatically if they sent you WAY too many requests in a short span of time (likely to be a bot). Even then you shouldn't trust any data before validation and sanitization.
In the end you can only rely on the backend policies, routines and data to keep everything safe and running.