> Anyone who doesn't know that prng's are broken for things like uuids shouldn't be in charge.

Depends on how you're using them. If you only care about collisions, and you're not worried about an attacker trying to manipulate your system, then using a PRNG whose output is well-distributed (read: not necessarily a language's random function) is fine. The problem is most language's default PRNGs are complete crap :(

edit: grammar