Add new user to repository shows (?) all bitbucket users

Hello there,

When you are adding a new user to a private repository, the screen goes auto-completing the username and shows usernames that appear to be system-wide and not only users for that "account". At least for my case, my repos doesn't have users yet, so the field shouldn't have any users to select. Ain't this right?

My point is, for me, this is a security breach.