"We're making your account more secure. Please replace your username [which is entirely private and nobdy knows it] with your email [which everybody knows]."

Yeah, I'm sure that's more secure.