This doesn't preclude RdRand from being _worse_ however. If your software— by design— eliminates side channels and isolates out timing. Then your hypothetical

This doesn't preclude RdRand from being _worse_ however. If your software— by design— eliminates side channels and isolates out timing. Then your hypothetical evil AES() would have a hard time screwing you over— it still might, somehow, but the window may be very narrow. The only way to narrow the exposure from a bad rdrand is to never use it directly (e.g. without whitening via a CSPRNG with other truly random inputs).