Even if it does, a username alone isn't a security breach. You would think they'd use ssh chroots or something, but there are no security issues with seeing a username
Now they can start trying common passwords on logins that they know exist, rather than having to guess at that too.