There was some controversy on RDRAND because there was suspicion that it may have been backdoored. As you all know, NSA conspiracies are in vogue these days, and IC's only a few dozen nanometres across built using private manufacturing processes are not the easiest thing to study. It is probably best to only use it as just another source to the operating system's entropy pool*, however, instead of using it directly, as I believe the Linux and BSD kernels already do, to make sure it cannot poison software on its own. I kinda feel like it should have been made a privileged instruction, to ensure it can only be consumed by the operating system (which is really the only service you can trust to provide cryptographically secure random numbers under normal circumstances and without special hardware, and even then, unless your software has very specific requirements e.g. certified online gambling server, letting that hardware interface with the operating system's entropy pool* is the recommended procedure).
* unless you are running Windows, in which case it is recommended to trust only yourself (tongue in cheek.. or.. is it...)