Indeed, the eternal challenge in cryptography (implementation vs theory). While not intending to place blame, it's somewhat disappointing that a modern platform like WASM didn't provide a strong PRNG by default.