Meta says usernames improve privacy, but critics question whether its safeguards can prevent impersonation.