Well, the hmac *does* add an important amount of security; I hope you don't take it out without first checking that the UUIDs are truly and unpredictably random (or without using a secure rng).