Currently Confluence passes usernames in the URL and HTTP request/responses, referrals and password reset for example. Basically anywhere the URL is logged which can be discovered through local browser histories as well as the applications logs etc.

In sensitive environments where even admins should not have username details it would be useful to be able to switch the usernames to another unidentifiable parameter such as a UID in case of a locally compromised machine.