Comment by SoftTalker

Yes if you’re sending the number to the user, might as well just be random that’s a lot easier.

Clocks and secrets only needed if the user is providing a number generated on the remote side.