WordPress doesn't believe it's a security risk.
http://wptavern.com/why-showing-the-wordpress-username-is-not-a-security-risk
But it still is annoying.
This plugin helps a little bit.
http://wordpress.org/extend/plugins/wp-author-slug/
But there is still another way to possibly find the exact usernames.