Ouch, that's a big footgun. Why was the lack of randomization considered a vulnerability, but not this?