With all the new security changes being introduced,could not stay without mentioning this one.You may add an option to make possible account name change with a cool-down of several days ( example : 120 to 150 days ) ,if it does not bring any kind of new conflicts with the existing security measures of course.