You're attacking a strawman. No one is saying that all UUIDs are generated by CSPRNGs. Only that some are. Regardless of what method you use to generate secret

You're attacking a strawman. No one is saying that all UUIDs are generated by CSPRNGs. Only that some are. Regardless of what method you use to generate secrets, someone could later change the code to generate the same secret using a non-cryptographically-secure RNG. By that logic, alphanumeric strings should not be used as secrets either.