That is inexcusably small, and adding a PID to it wouldn't make it meaningfully better.
Strengthening can be a useful tool in the rare case where there isn't any alternative, but it doesn't replace having good entropy to begin with. The only systems that should use weak entropy (plus strengthening) are ones where the unrelated-to-you brute force attackers shouldn't exist (e.g. where they need a secret database to even begin the attack) and where there can be a strong nonce to prevent parallel attack speedups and precomputation.
Every operating system offers a source of cryptographically strong random numbers. Why isn't it using 256-bits (or at least 128 bits) of OS provided entropy?