Validity has several layers
A string can use the Base64 alphabet yet still have invalid length, padding placement or non-canonical trailing bits. The validator checks those structural details and can decode/re-encode to catch ambiguous forms. Passing Base64 validation says nothing about what the decoded bytes mean.