A platform manager needs to disable users' ability to update their username via the Profile Fields task in Core > Settings > Profile > Profile Fields.