random.random() and random module are not cryptographically secure.
Use secrets module (secrets.token_bytes, secrets.choice) for security-sensitive randomness.