Why reCAPTCHA Tokens Must Be Verified on the Server

One security detail that is easy to misunderstand when implementing Google reCAPTCHA is the difference between generating a token and actually verifying it. These are two separate steps, and mixing th