Читаю доку. У меня видимо как-то плохо с английским - не могу понять 2 фразы из доки

https://docs.spring.io/spring-security/site/docs/current/reference/html/websocket.html#websocket-authorization-notes

1:
https://docs.spring.io/spring-security/site/docs/current/reference/html/websocket.html#websocket-authorization-notes
In general, it is common for applications to deny any MESSAGE sent to a message that starts with the broker prefix (i.e. "/topic/" or "/queue/").
В целом, принято, что приложения запрещают отправлять мессаджы типа MESSAGE на broker префиксы ("/topic/" or "/queue/")

Клиентам запрещают же?

https://docs.spring.io/spring-security/site/docs/current/reference/html/websocket.html#websocket-authorization-notes
In general, it is common for applications to deny any SUBSCRIBE sent to a message that starts with the broker prefix (i.e. "/topic/" or "/queue/"). Of course we may provide exceptions to account for things like