The problem is the standard doesn't guarantee that, so people will inevitably read the standard, decide that they can't actually trust random_device, and then build their own, much worse version.

And on Linux you can pass the string "/dev/urandom" to the constructor