[tantek]"malicious site purposefully uses the same UUID as an article on another site" agree with that scenario, however: "namespace the UID to the site in some way" <- wait doesn't that defeat the whole assumption that feed GUIDs are independent of domain?!?
