Also, it is good to keep concepts of account ID, public username, and login username separate. By using random account ID, can change the other values. Most accounts want email but don’t have to make it user name. Or people have multiple accounts and makes sense to have email reused.

For login, it can help to have multiple methods. Then people can change from OIDC to password, or between providers.