The other one is that after rewinding you've got the identical internal state of the CSPRNG.

So you're possibly reusing the same random numbers (or closely related ones) as before.

Of course, after a short while the rewinded VM diverges. It's another flavor of the cold boot case, really.