On the documentation it says:
"Uses cryptographically-strong random number APIs (when available)"
I imagine that this means that there are situations where the unsecure Math.random is used?
Also as a follow up what version is most recommended for generating secure and unique session ids?
Thanks