You have to trust that both 1) the UUID issuing party is not keeping the actual id to uuid mapping in the logs 2) the same party isn't allocating an excessive number of uuids to mass-vote for the "good" choice.

In-person voting does provide these guarantees, to extent that violating them will be discoverable and both parties have an incentive to discover such things.