i feel that stance would be defensible. there are plenty of great engineering reasons to generate a per-device randomized UID during intial provisioning. default password, serial number, seeding/salting, mac randomization, licensing/drm, anonymized logs, etc.