I don’t want to generate the randomness myself, though. I want a physical tool that doesn’t rely on a pseudorandom number generator that may or may not have a vulnerability exposed in the future.

See here for an example that illustrates my concern. It took 7 years to find the vulnerability.