Comment by dmitrygr

The main problem that people have with this, is basically there is no way to verify that the design matches the actual implementation. At least there is no way you or I could do it. After the Snowden Revelations, trusting becomes difficult. That is why basically everyone who uses this instruction, mixes it with other data to make sure that even if this generator really was backdoored, the damage is limited