You need to have a restricted set of allowed syllables to prevent attackers from having names with similar pronounciation to common ones.

In unique name world I would totally for a scammer telling me "Hello, my name is Marck Zuckaberg, give me all your data".