This is exactly why I decided to restore my account after deactivating it and just leave it locked, dormant, and pointing to my Nostr profile. I didn’t want someone else to grab my username and start impersonating me, or worse.