I agree, all three of them are important! We’ll implement all of those, probably in the order you’ve asked.
About password change, you can do it by asking for a password recovery email. It’s not convenient, but allows you to do it until we have a proper dialog for it.
About username, we can support changing it, but then all the old URLs would be broken, so we have to warn the user about it.