Sorry for late response. If i sell my products on market like TF everyone can see source code. So if someone just add field with right name acf will update it.
Example:
We have field ‘test_field’ and location rules user_role: administrator and post type: post. So now user with editor role add for example
<input type="hidden" name="test_field" value="test">
Press update/publish post and acf will update this field.
Looks like ill have to check everything by myself and location rules for user role is just ‘visual’.
