You are correct though, Postfix doesn’t handle usernames with an ‘@’ in it, so to allow email delivery to such users, Virtualmin creates a second user with the same UID/GID, and delivers email to it. The other services handle that ‘@’ without a problem, so users in most cases won’t even realize that there is a second username being used behind the scenes.