Validation in token inputs is broken in 2 related but different ways.
Open a thread.
Press the edit tags icon.
Press comma twice.
This will insert a comma tag which should be disallowed because a comma plus spaces is the delimiter for token inputs.