lots of keyboard warriors talking confidently about topics they absolutely do not understand.
an ifdef on a rng is just as easily an ifdef on user-defined entropy, or anything else for that matter.
did coinkite pay for a third party security assessment of their critical code? this is separate from being “open source” and standard practice for software that matters. e.g. most password managers have third party security audits.