UUID is generated once via crypto.randomUUID(), persisted in chrome.storage.local, and sent from the content script to the inpage script via postMessage.
_metamask.isUnlocked() now checks provider.selectedAddress instead of always returning true.