I wouldn't be excessively surprised if someone found a regularity in a common pseudorandom generator algorithm that could be exploited to narrow down the search for the prime numbers used for RSA keys.

This would fall under "breaking some implementations of RSA" and not "breaking RSA", but is close enough for practical purposes that your colleague might be right (or at least, not be in a seperate cast-iron category of "wrong", especially if you also consider quantum computing arguments).