Granting anonymous users permission to access user
    profiles poses a security risk because it allows users who are not logged
    into the site to obtain usernames. More information is available in the
    module README or on the !url.