Good news: We're using `crypto.getRandomValues()` here, which is about as close to "real" randomness as your deterministic machine can get. It harvests entropy from hardware noise, mouse movements, and possibly your CPU's existential dread. Still not truly random, but your passwords will be fine. Probably.