Such a button is not rendered to the browser, so is there any way a malicious user would be able to trigger the action defined by the invisible button? e.g. with a JavaScript call to `WebForm_DoPostBackWithOptions`? Would ASP.NET accept a POST that appeared to be triggered by this button, even though it wasn't rendered?