Creating Blank Accounts from Read Only Form

Our user base will not be creating Accounts as they are sourced from another system, so the form has most of the fields set as Read Only.  We recently noticed that we are able to select new, open that form, and then hit save and it creates the record with NO DATA entered.  No Account Name or anything.  I'm not sure why the basic validation is just not firing.  This shouldn't be a problem in the future as our users will not have Create Account rights anyway, but it's a little concerning.  Not sure if we've discovered a bug or something.

Thanks!