[mdda]

But surely the client could use human input as it's source of randomness too : After all, in this case (browser purchases) the user is going to be hitting keys and/or moving the mouse.

[ars]

It could, and today it does. But back then it didn't.