I agree with you—entropy measures the process, it’s not the value. Safety is a separate question.
000…001 has the same probability as the number exactly in the middle of the 128-bit range. A solid entropy process costs an attack the same expected guesses.
Safety is about the attacker's time and effort, and I think that's your point —safety varies by value, entropy doesn't.
