I thought that was the case too at first, however it has to be like that. The user always comunicates with the smart contract. The frontend serves as a UI of sorts, you could use the contract only with a command line tool, I think it was called geth. It is secure because the contract handles the data based on senders address which as far as I know can not be couterfeited.