At the end of the day fucking with the source code of GPG or trying hackish ways of seeding /dev/urandom are far more likely to fuck you than you are to be fucked by using a 4,096 bit RSA key.