My guess is that someone was instructed to generate "random bytes" and just did 'char secret = rand()' or something similar.