These 16 chars aren't hit, after jmp esp (ret), esp will point just after these 16 chars, so NOP's dont help for anything here. Since they are not helping, and some times nopsleds detection is used by security products, is better to avoid unnecessary nops. Random chars make harder to detect the exploit.