It's always better to use `SecureRandom`