I'm fairly convinced that the RNG is not a true random number generator. It's just a pseudo random generator using some sort of algorithm like a posh randu. With the WIFI turned off, the RNG produces random numbers at the rate of ~360 Mbps on mine. And that's after randomness extraction/ whitening and with the alleged entropy source disabled. That's impossible. The generator should simply stop without an adequate entropy supply, as does /dev/random.
This tweet (https://twitter.com/esp8266/status/692469830834855936) suggests as much. It sounds like the RDRAND Intel con, which I kinda understand from a security services perspective. I just wondered if anyone knew the internal mechanism.