ABout CSRF feature: what is it for?

It stops an attacker to submit a form as another user. So that they can't transfer all your money to their bank accounts.

You can find more information about it here:
https://owasp.org/www-community/attacks/csrf
https://en.wikipedia.org/wiki/Cross-site...st_forgery