Many sites rate usernames as public information, with SSH keys and passwords being private. Getting a list of users is not typically considered a security issu

Many sites rate usernames as public information, with SSH keys and passwords being private. Getting a list of users is not typically considered a security issue. If you chose (or were forced to choose) a username the was based on your real name, that could be a privacy issue (as well as a namespace collision problem), but not really a security issue.