How to Avoid Public Submissions Accepted on All Paths?

It seems Locomotive accepts public submission POST requests of any content_type to any path.

Is there a way to change this behavior so that form submissions only work with the public submission url (/entry_submissions/<content type slug>)?

This way, we can easily lock out spam bots which don't run javascript.