They need to offer a move away from numerical user ids. What is that called, where you can guess or arbitrarily determine something algorithmically or formulaically or like throwing a dart randomly and hitting a real identity to exploit?

Also the same deal when people use numeric pin codes. If the replay mechanism is screwed, its literlaly only a matter of time