Then don't enable that feature for usergroups you do not trust with this power
Unfortunately it's not feasible to allow moderators to only change certain other groups' usernames, as that would introduce multiple layers of complexion.
Similar, vBulletin does not allow administrators with Can Administer Users to only modify users belonging to a specific usergroup.
Fillip