Comment by killerstorm

Well, if the developer read libngu's random.c he would have noticed that it uses rng_get() and that it's asking for MICROPY_HW_ENABLE_RNG (albeit the failsafe is defective, reading it should have at least triggered "wait, what?").

So I'd say the root cause that the developer didn't check what random.bytes() does under the hood or how libngu expects random to be generated.