Good morning everyone! I have a feature request please...

I have a concern about the "must not match username" password policy option in SM.
 
From what i understand, that means that someone with the email address linda@blah.com cannot have a password of linda
 
 That's fine and well, but my concern...
 
Let's say linda@blah.com had a password of Linda1... would that not be just as easy to brute force as a password of linda? The difference is only one cap and one number.
 
 Do you see where I'm getting at?
 
I'm not sure if allowing a password of Linda1 for a user called linda@blah.com is a good idea, but current SM let's you do that because it technically does not match the username.
 
Is there anything you guys are planning to do to make this more secure? If not, may I request it?
 
Thanks! :)