UUIDs are great for identifying users, requests, transactions, tenants etc etc. They are unlikely to collide, their predictable format reduces cognitive load, rules on their content avoid compatibility issues (ever try putting random strings into URLs and hoping for the best?), their ubiquity means you don’t have to explain them…