Hello,
I might not have read properly, but it appears that the old criteria disallowing a user to set his username as password won't be kept. Is it the case?
Best,
Topic on Talk:Wikimedia Security Team/Password strengthening 2019
That requirement remains and is detailed in the policy. This project covers the new additions.