Since usernames are only unique to the instance it’s created on, what’s to stop someone from creating a copycat username in order to impersonate another user?
Since usernames are only unique to the instance it’s created on, what’s to stop someone from creating a copycat username in order to impersonate another user?
No different than email. That’s why domains should be displayed in clients for users.