Ignoring that those may not be great sources for cryptographic randomness, how does one do something like that when the userland isn't established yet because the system is still booting?

That's why a working getrandom is so important.