"Common admin username" security test is simplistic

The "Common Admin username" test in acquia_spi.module (acquia_spi_get_super_name()) just tests for the presence of the strings "admin" and "root", which is overly simplistic. It complains, for example, about admin-dedd3e56a686, which I think is sufficiently difficult to guess. To ban those strings is to prevent site owners from capturing the business significance of the user in its name, which seems like an unnecessary concession. I suggest the test be sophisticated–perhaps to require a certain length or a number of bits of entropy or something if a username contains one of the blacklisted strings.