Comment by sroussey

Well, that assumes that the ID is cryptographically random. Perhaps that is a bad assumption.