I always found it astonishing that security and integrity of the internet often rests upon “but TCP sequence numbers are unguessable”
sequence numbers were once considered 'good enough' as prime-factors are today
Almost every internet security mechanism relies on nobody guessing secret numbers, but normally they are sized appropriately.