I agree with the point you guys are making.
Obviously it's a privacy issue, however small. My initial concern wasn't that someone could access my PN account as such (I have a pretty strong password policy), but rather the other information it could expose - if someone can learn my personal details from the IP, this gives them more information to could then be used to gather other information or engineer various other types of attack. It might be pretty unlikely but its definitely a concern.
I agree that the threat would be even less if my full name was not my username - to be honest, I can't remember ever selecting this myself, I think I signed up to PN over the phone and the details were generated by the agent.
Anyway, I guess the main priority for me is that it is fixed in my instance, which it hopefully will be in the next few days. At a wider level though I would definitely hope PN would be aware of this and looking into correcting the policy to avoid issues in future.
