They also built anti-cheat.
When you first hatch, the model generates a name and personality (the "soul"). This gets stored in your config.
But the physical traits (species, rarity, stats) are never saved — they're regenerated from your account hash every time.
From the source: "editing config.companion can't fake a rarity"