Luckily the user does not need to guard against cheating clients. Any dynamically generated choice is remembered by the server - so any choice selected dynamically can be verified by the server as one it offered to the user.