If you've got randomly generated username, it is, effectively a password, except that no tooling would ever treat it as such, which may be a problem. Ofc, this

If you've got randomly generated username, it is, effectively a password, except that no tooling would ever treat it as such, which may be a problem. Ofc, this only holds where your username is not a public ID (say on a forum). Which is why I like decoupling usernames (or rather "nicknames") from authentication. Email and password represent your actual identifiers. So as others noted, why bother?