The micro Python interpreter used the wrong random number generator function because they had the same name, so instead of using the coldcard function, it used the built-in micro Python one that wasn't secure.