Minor nit though: those rolls are being turned into a seed by a process you can’t verify. You can audit the code, yes, but fundamentally it’s un-verifiable because you can’t interrogate the specific circuit and firmware performing the roll-to-seed procedure.