From my perspective, if there were a way to disable anyone from using the login of 'admin' or 'administrator' when registering, that would be awesome. Or create a couple of different choices. For instance, make a toggle that cuts off admin logins after one attempt but other logins after 3-5 attempts. I have clients on the road all the time. They blog from various locations. If they f-up their login multiple times and are locked out, they call or email me to unlock. I ask them to identify their IP address by using a source like http://whatsmyip.org. I then go in in and identify their attempts and unlock them. A one time error like this is a freebie...but if they continue to do it, I charge them my going rate.
But whether the Wordfence crew decide to do this or not is irrelevant. Yes, this might make some web designer/developers lives easier, but if it comes down to your REAL users forgetting their usernames... my feeling is that if it's a one time thing... BFD!! If it's every time they travel, train them by charging them! They'll learn!
What I would like to see is a better security experience where a registered user could have more than just "Forgot Password" as an option. What about "Forgot Username"? Anyway, that's probably not a Wordfence problem, but a WordPress consideration.
