> Personally I'd add `enforce(!exists, "qwertyuiop09813478");` beforehand. Maybe I'm being too cautious about security though.

You know, that's always bothered me a little too. Alternatives could also include simply trying to run a uuid.

Well, in any case, let's not waste too much effort on this. The change is still an improvement.