>And apparently the backend is totally okay with a user name that doesn't exist in the database?

What do you think happens when a previously unregistered user creates an account