Right - but do remember that harder the both of them more secure you are. That is why we didn’t name it as username or something as we thought that can have some drawbacks:
- Technically that is not a username. You would never share that with anyone because it solves no purpose. Later when Public IDs become more common and people start sharing that, there might be a little confusion as username also implies something that is shareable but is certainly not meant for that.
- If people can easily guess where your account packet is in the Network it narrows down the attack vector to just decrypting that packet.