People do cheat. They use a program to see things that are dead or not visible (used to be able to see VNM) and they target the ??? before it is up. While this is targeted, its client side only. Nobody else can see it except the player and nobody can see the player targeting it. When they have the ??? targeted they spam a bot that repeats a line over and over, which would be /item "" <t>.