Why would it need to be cryptographically secure for this use case?