@dirvine sums up the entire thread and then goes beyone…but here it is anyway. Since I spent the time looking for it
Continuing the discussion from Possible attack vector - mass username registration: