Why is it possible to write any string in the hash salt
You can read about it in the default.settings.php file:


  Salt for one-time login links, cancel links, form tokens, etc.
  
  This variable will be set to a random value by the installer. All one-time
  login links will be invalidated if the value is changed. Note that if your
  site is deployed on a cluster of web servers, you must ensure that this
  variable has the same value on each server.
  
  For enhanced security, you may set this variable to the contents of a file
  outside your document root; you should also ensure that this file is not
  stored with backups of your database.


This value is used by Drupal as salt for some cryptographic operations. It should be a random value. It adds more security to those cryptographic operations (as long as the value is not known by an attacker).

As far as I know Drupal uses a auto-generated salt value based on Database credentials when no salt is set, so Drupal should work without a salt value.