Before "multiscan"/"multisync" CRTs, there were fixed mode CRTs which would break in one way or the other if the incoming signal had the wrong timings.
> My understanding is that monitors and/or graphics cards/drivers would reject potentially harmful configurations.
It's done in the monitor.