This case is truly ridiculous. I remember doing "crack the (MT19937) Mersenne twister" as a cryptography 101 exercise 10 years ago - and it was a very old attack back then! Unforgivable, showing that whoever's in charge doesn't give a fuck about security (they didn't have to know it, they could have asked literally anyone with specialist knowledge). This is the problem with business types focused on marketing. Taking that attitude w.r.t. bearer instruments is a never ending category error, it seems.