Wouldn't you need to expose UUID if you want to make use of optimistic locking?

I feel that this is among the good reasons to keep exposing UUID in the API.