The comment there says "as digest has not yet been initialized at that point" but `digest` is not used anymore now. The current reason is that we call `super(0)` in all SecureRandom constructors and we don't want a SecureRandom object always seeded right at the beginning. For example, when `new SecureRandom()` is called.