Pretty much everything is moving to UUID of sorts including Google auth. It's tricky because you often need to let people reference username/emails for mention

Pretty much everything is moving to UUID of sorts including Google auth. It's tricky because you often need to let people reference username/emails for mentions and etc, so you just have to index all of em and translate to UUIDs for references behind the scenes. It gets extra tricky with APIs. Consider AirPlane.dev which let's you specificy approvers via email. Now a user changes their name and their email. Well, that "IaC" suddenly references an invalid email or worse a different user because jane.doe joined after jane.doe-brown got their new email.