Do you mean uuid v4 and also hmac, or just uuid v4 alone?

uuid v4 alone would be safe if it was actually random, but what you have here is safe even if the UUID is not truly random.