For behavior models like risk ratings sure. A similar example is threat and fraud detection; if scammers know what you're checking it'd be easier to work around.

In this case though the output is supposed to be a "fair" random number. If knowing how it's generated allows you to be able to predetermine it, i.e. exactly what the offender in this case did, then the code itself is bad and public eyeballs might find it.