Overview
In src/components/leaderboard/LeaderboardConference.tsx the list 'Join' button (lines 247-251) calls setActiveConference directly, bypassing the handleJoinConference fraud/lock checks (lines 86-114) that the design intends, so locked or disallowed rooms can still be entered. Route all joins through handleJoinConference.
Overview
In src/components/leaderboard/LeaderboardConference.tsx the list 'Join' button (lines 247-251) calls setActiveConference directly, bypassing the handleJoinConference fraud/lock checks (lines 86-114) that the design intends, so locked or disallowed rooms can still be entered. Route all joins through handleJoinConference.