Trust Level 4 - change username?

Now our Trust Level 1’s are able to change their usernames…we have not changed any settings to allow this. Any feedback welcome.

Edit: I’ve now changed “allow username edit” permission to 0 to see if that works…