is this addressing anything other than potentially weak randomness, on the part of a single vendor?

if not, why not save cost, use open-source, and verify entropy/randomness? ... failing that, roll dice... ?