java.util.Random or kotlin.random.Random is predictable and must not be used to generate tokens, keys, or nonces.
Use java.security.SecureRandom for any security-sensitive random values.