The hardware UUID used right now is the DMTF board UUID (system section, type 1), integrators and OEMs are responsible for filling out this information. It seems mistakes are tolerated, grinds my gears.