Regex match without anchor

Review this Python validator that checks a username is exactly lowercase letters and digits, 3–16 chars.