I assume that if the "random" number depends on a certain combination of processor instructions, there are ways to attack this PRNG (pseudo-random number generator), for example by monitoring the power consumption of the system or its RF emissions.

The solution with the timer should be less susceptible to these types of attack, unless the timer consumes more/less power at a rollover than during a regular increment.