Because not all software are only run on systems with /dev/random, and /dev/random doesn't
provide all the needed flexibility that some applications (especially those directly dealing
with security) require (e.g., knowing how much entropy it reflects).