Comment by agwa

As opposed to putting a CSPRNG in userspace, in which case they only need to compromise either of two CSPRNG codebases?