I maintain and monitor around 20 web sites for clients and personal projects. I use Wordfence to prevent author scrubbing, but after seeing a bunch of attacks on a few sites with bots trying to log in with near accurate user ID's (I have approximate knowledge of many things!) I wasn't sure where the bots were getting the user info since it's not displayed in the theme. Turns out it Yoast was inserting author info in the head meta.
Unfortunately WordPress allows an author slug to be the same or almost the same as the user ID (username ), replacing spaces with hyphens. So a user with a login of "firstname lastname"( which is common in corporations) will have the author slug "fristname-lastname" Bots crawling a site with Yoast or a theme that displays author links and info often use "fristname-lastname"in there brute force attacks. Somehow the people whop program the bots haven't been smart enough to replace hyphens with spaces in their attacks, which is surprising. A lot of people use a one word personal nickname as their username which makes it even easier for the bots. Having a company policy for carefully crafting user names that don't match display names isn enforceable in real life, and wouldn't really solve the problem.
I'm not sure why WordPress doesn't allow you to change the username or user slug once you have created the account. Changing that might help. Even if you manually create all the usernames that don't match their real names, that slug will still be revealed with some themes and Yoast, I assume AISEO does the same.
Another workaround is to have a user with a name like "(insert company name) Marketing Team" and assign that user as the author. This works for display purposes but again, if your theme displays author info or you are using and SEO plugin you're back at square one.
I'm proposing a WordPress setting you could use to define a display name and an author slug for a nonexistent user with no username, so bots couldn't guess or scrape the username. You could do this with the_author hook and a settings filed, but it would be useful to actually be able to choose that fake author from the post edit screen, and for those posts where you might actually want to show the real author, you should be able to choose an author slug that is independent of the username. It seems to me this should be built into WordPress.