I want to bring this issue to the attention of Frappe’s Core Dev team…This is becoming a back door entry amongst the users to select a forbidden value in a link field. (E.g. - Suppliers for whom PO is prevented, can still be selected in a PO by manually typing the supplier name.)
EDIT:
Same error has been reported by another user at Frappe forum: