Sorry for being slow to get to this. The first API matches by user key or username and was introduced to help apps migrate away from their dependency on user keys and usernames to improve privacy (a GDPR project). The second API performs more liberal searching for users that is more appropriate to populate a “user picker” functionality.