Solutions
-
MrFisc's post in Is manual CSRF required for `\IPS\Node\Model` subclasses? was marked as the answerI figured it out. My confusion was around the `csrfProtected` property.
I needed to add it to any Controller that uses the Node due to the nodes reliance on an `\IPS\Helpers\Form`.