WordPress sets a unique ID for every user account you create. While this isn't a security flaw, but changing it can prevent script kiddies from messing up with password reset functionality.