Not necessarily,
Make one that replaces all ores (and other desired things) outside of a visible range for the player, into stone, but only for that player.
Then, once they can see it, show them what is really there.
There's no way any hack can get through that, as the server is sending false...