Yep, plus I know a lot of my friends using Spotify login using Facebook, which displays their full name & profile photo. Also followers/following lists are public, so if you can find a close contact of theirs who is less serious about opsec, you're that much closer to their actual identity. This is only really relevant to the truly paranoid who try to use a different identity for every service.