Even with an audit you would find the hardware RNG in the code, and maybe the backup as a fallback option which all together “runs” and rolled over for 5 years. The false security people had is st...