Ask HN: How does Facebook prevent websites from clicking the "like" button?

It seems like websites could just invoke the JS to "force" the user to click the like button, write a comment, etc. Anybody know how is this prevented?