The generation could still be deterministic in some way. I haven't looked over the code yet, so I don't know.
Even if it is securely created, there's nothing stopping the code being modified to some clients.
Even if it is securely created, there's nothing stopping the code being modified to some clients.