You also have to protect against an attacker guessing your next PRNG output, which is highly likely for non-crypto PRNGs even if they'll never collide with them

You also have to protect against an attacker guessing your next PRNG output, which is highly likely for non-crypto PRNGs even if they'll never collide with themselves. So always use the secure RNG from your language or OS for generating UUIDs.