Smart move by @vercel. We usually use our email address, which is publicly known, as username in important platforms. This gives threat actors an advantage: they already know your username, now they just need to get your password or 2FA to reset your account access. That's why we always recommend to use cold email accounts for important stuff. But given the fact that can not be enforced by platforms, I consider this a great cybersecurity enhancement.