Endpoint /livewire/update can be hit outside of laravel application

Any Livewire Update request can be copied from the network tab and imported into Postman. It will work simply as working in the browser, which is violating the usage of the checksum and livewire _token included in the body of the update request.

I have added middleware checks and other checks inside the component but it still works with the _token and checksum from the browser call.

I think there should be randomized checksum which will prevent such issues, like the csrf token in laravel.