I ran into this issue as well, and was temporarily banned from an IRC net because irssi was in a loop reconnecting with various usernames. The attempts with real usernames alerted the admins but I think this sat for several days disclosing process memory on my behalf.
This is fixed for bullseye coming up but is still a concern for buster and stretch right now.
