Quoting Jim Reid,

> While I'm here, maybe someone should be - already is? -
> looking at some way of reducing the exposure and/or guessability of
> filehandles...

It was looked at, and as you can see, fsirand(8) is already in the tree.
I believe the completion of this is currently stalled on a good /dev/random
implementation.

- Frank