> Even if you have to remember an email address for account recovery, you want your internal identifier for accounts to be meaningless. This will make your life much simpler in the long run, even if this is never exposed to people.

This is the solution.

The rest is an implementation detail ;)

Yes. It’s bringing attention to the issue. That way people can discuss.

It does but the solution is mundane: use an auto generated primary key.