Since usernames are only unique to the instance it’s created on, what’s to stop someone from creating a copycat username in order to impersonate another user?
Nothing, but keep in mind that maybe 95% or even 99% of the fediverse users are a bunch of nobodies. To have a stalker or someone trying to impersonate you, you would have to be extremely lucky (or unlucky)