You can change your display name, that’s a feature, not a bug.
That would not allow them to evade ban, as bans are based on usernames, that cannot be changed.
User impersonation can be an issue, but usually most clients also show the instance, which would allow other people to know who’s the real person and who’s the imposter.