People are likely to use it in security-relevant ways without being aware that the use case constitutes “crypto”.

Exactly - I'm just generating random session ids, I'm not encrypting anything (or using any bitcoins). There's no crypto here, right?

Anakin Padme 4 Panel "right?" meme.