My guess would be they spread random false positives for privacy reasons?

Same here. For a moment, I thought my imagination was insufficient. Then I remembered I tied my imagination to /dev/random

Or a hash with not enough bits to avoid collisions, and no chaining.