What is the meaning of wp_nonce?

Question

Information Security

I understand how wp_nonce works, when submitting a form, a token is generated based on some variables:

substr( wp_hash( $i . '|' . $action . '|' . $uid . '|' . $token, 'nonce' ), -12, 10 )

Then, after submitting the form, it is checked by the server:
hash_equals( $expected, $nonce );
But damn it, what's the point? If we can look at the token generated in the form and submit it along with our "left" form and data? In theory, these tokens should be one-time, in WordPress, as far as I understood from the code, they are not one-time, but simply valid for some time. But even if you make them disposable, you can just open the form, see the token, not send the original form, but send the one you need, with the current token, so it is used only once. I do not understand something?