That says that it will use the OS's random, which is what we do. It's true that the random_device can specify /dev/random, instead of /dev/urandom, which helps, but I don't know that people generally consider that a cryptographically secure source of entropy (though it is widely used as one)
(edited)