I am building a web app were I will require the name and lastname from the user.

My question is if it reasonable to give the option to the user to alter/modify these two.

I mean, people, have the same name and lastname throughout their lifes.

Of course there are some exceptions to the above rule-but from another point of view changing the name and lastname in
an account might hide security issues.

What do you think?