The patch solely AFAIK prevent first name or last name that does not exists.
Basically all special chars are refused. It should not collide with real user name, hence not indispose them. But if exception exists let us know.
Any char in the regex are refused. Sole exceptions the . not at the end or not followed by a space.
Tell us any use case that could be an issue for you