For non-cryptographic applications, a PRNG like xorshift reseeded by a few bits from an oscillator might be enough. As I understand it, the reason they don't u

For non-cryptographic applications, a PRNG like xorshift reseeded by a few bits from an oscillator might be enough. As I understand it, the reason they don't use on-chip RNGs by themselves isn't due to lack of entropy, it's because people don't trust them not to put a backdoor on the chips or to have some kind of bug. Intel has https://en.m.wikipedia.org/wiki/RDRAND https://en.m.wikipedia.org/wiki/RDRAND but almost all chips seem to now have some kind of RNG.