symfony/symfony — comment on commit 9d2ab9ca9c1762c529e053cefd39a5e626102133
File: src/Symfony/Bridge/Doctrine/Security/User/EntityUserProvider.php line 83
By fabpot:

Correct. If you allow the user to change its primary key, then the security issue stil exist. But frankly, I don't think this happens a lot, does it?