One thing I like about farcaster is they split the user ID registry (256bit ints) with the name registry (aliases like ).
If whoever manages the name reg (nonprofit, multisig, DAO) turns out to be bad actor, users can fork & point their clients to a new name registry.
Conversation
You can see the implementation here although it may be from an earlier version of the spec:
github.com/farcasterxyz/c