Yes, that's true, we could add an API to let the server generate the random number so it is unpredictable, I can consider that for a future update :)