I think of it more as "no username, only password". Realistically, usernames are not expected to be secure or private, so this is effectively the same.