It avoids revealing whether a particular username exists.

It confirms that every attempted username is valid.

The message alone prevents automated login attempts.

It means the site does not use passwords.