The default uid when creating a new user is the first available one, considering only non-builtin users. If one creates a user with an id less than 1000 (to avoid having to use error-prone numeric values in permissions for jail users), this will start offering up uids less than 1000. They may even conflict with a builtin user.