Core WordPress routes stop exposing login-capable usernames; anonymous requests to the author query and REST users endpoint become hard-filter signals.
Trade-off
Standard author metadata, themes, plugins, or integrations may expose the same value as the login username outside the routes WP fail2ban controls.
Keep login-capable usernames private
User-enumeration protection is included in WP fail2ban Free. It blocks direct anonymous enumeration and removes author information from public WordPress responses. Premium lets you configure the policy through WordPress admin and see when the author query or REST users endpoint is being probed.
Protect the information. Preserve the WordPress behaviour your site needs.
