The &quot;non-problem&quot; of a biased PRNG is that you get reduced entropy in your generated passwords, thus reducing security.<p>The &quot;flaw&quot; in the pull request was fixed in a later commit (by switching to Uint8Array instead of Uint32Array), and then it was ignored by the SpiderOak team.