Because we don't generate random numbers to look at them and marvel at their philosophical pureness, we use them. In software.

So those bits will be known to software, no matter where the generation happens.

Your argument would make a bit of sense if you were arguing for doing all cryptographic operations in hardware. Like on a smartcard. But that's not what we're talking about.