If the directory had a random name, the attacker could see that name and recreate it after /tmp is flushed.
Only if you reuse the same random name. Which would be silly.
Only if you reuse the same random name. Which would be silly.