For now I've enabled channel join notifications, so at least usernames are visible publicly when someone is clearly trying to impersonate