I believe it's because you can find code where it does the right thing when e.g. a username is short enough, but fails in a useful way if you increase an input

I believe it's because you can find code where it does the right thing when e.g. a username is short enough, but fails in a useful way if you increase an input string length.