It would be good to provide an Admin UI config option to protect user profile pages from being viewable by everyone. This is especially true for public xwiki instances. Especially in the context of GDPR.

Right now the workaround is to use: https://snippets.xwiki.org/xwiki/bin/view/Extension/Initialize%20rights%20of%20user%20profiles/