Comment by JoshTriplett

I expect it's more a combination of several factors:

- if we don't have usernames we don't have to deal with obscene usernames, trademarked usernames, impersonation claims, and similar

- if we don't have usernames and our generated friend codes aren't guessable, we don't have to worry about people getting random unexpected friend requests from people they don't know