Udemy: CSRF Token Design Flaw

Our django site uses their standard CSRF implementation. The reporter has their own ideas about how CSRF protection should be implemented...