Hi Ariel,
I think using validation libraries like JQuery Validation is not the problem here. You can always use these libraries for front-end validations. I think your friend is pointing out that anyone can disable front-end scripting and can pass whatever they want to your backend. So the main point is to make the same validation on the server-side too. It is best practice to do the validations on both front-end and back-end.