An OTP is secure only if the key is truly random.

As we saw from eMudhra this week, people do stupid things.