Which usually isn't cryptographically secure. So now you need to audit the random number generator and make sure that it has no known holes, including obscure edge cases. And then you need to confirm that any implementation is correct and audited.
That quickly takes you down a rabbit hole, which may be why the contract was so expensive.
That quickly takes you down a rabbit hole, which may be why the contract was so expensive.