The other consideration is that impersonation might be pretty possible by making your own server called lemmy.mi or something and then stealing peoples username's verbatim. IDK if that'll ever become an issue but I do think its an avenue of attack for bad actors.