Validation of invitations wrt form is incomplete and not done on submission
First of all invitation validation wrt its form is done only when processing request, not when invitation is recorded. What is more the validation has gaps, mostly around checking of prefilled entries. E.g. invitation with email identity will be accepted even when form requires username identity.
This is especially problematic in case of invitations created by upman, to custom registration form.