As you said obfuscator are just a way to make decompiled code less easier to read, it's not a reliable protection. You have instead to build your own protection to ensure that a variable is not modified, or is in acceptable range for an instant T, etc...
You can't trust any answer provided by a client but you have to check on the server side if all is ok.