I understand it's desirable for your application to control participant metadata from the client, but because others rely on this security model, it's not a simple feature that can be added.
Long term, we do plan to make this more flexible so clients have much more capabilities around managing shared data.
In the mean time, it seems fairly straight forward to implement it by calling your own backend API. It does add a bit of latency, but it's negligible.