despite having invested the effort in making this change, i see your point.  since at present the only way a username can change is manually and by special arrangement, this is very much an edge case.

By "forbid" do you mean return an error if the username did change?  The original behavior is to accept and apply a username change if it happens.