That does sound pretty annoying, but it seems the simple solution from your end is to have a system for how you generate logins.
I don't really see how his scatter-brained approach to login management is any less of a problem there, or on literally any other system that uses an email as a username or a password recovery mechanism.