Not wanting to nitpick, but if attacker manages to unlink("/dev/urandom") then you have bigger problems than just not trusting this one file. Nothing application developer can do will make this system more secure.