According to the webform settings you can select a role that can submit the form, but it doesn't appear to check this on submission.
How to reproduce
Start filling out a form as a logged in user. Delete your Drupal cookies (or, let the cookie time out) and then press submit. The form will submit but from the user Anonymous (not verified) and in our case, forward to the Thank You page/message.