It would be a good security enhancement to check for confusable homoglyphs, using for instance https://github.com/vhf/confusable_homoglyphs

The following article worth a read: https://www.b-list.org/weblog/2018/feb/11/usernames/