[stormbrew]

So much this. In order to 'attack' this, how would you go about that? Somehow control who applies for the program so you wind up with an expected number?

And the gambling comparison is particularly bad. Excel is presumably not picking the same seed every day, no matter how bad it is. It's probably using time() when it's loaded, which is not great but also not visible to an 'attacker' and not consistent.