UUID’s should not be used for “security” they aren’t hashes, or suited to be used as encryption keys or any thing else. They don’t need to be kept secret as par

UUID’s should not be used for “security” they aren’t hashes, or suited to be used as encryption keys or any thing else. They don’t need to be kept secret as part of their trust model. There should never be a situation in which the disclosure of a UUID breaks the trust or security model of your application your design is wrong.