> I would really be interested to understand which use cases justify using an actual blocking call to retrieve random bits.

The only case I can think of is when you've mass produced a million devices that each need unique certificates that are generated on first boot. If no good source of randomness is available, there's a decent risk you'll have duplicates.