- You can set your public url as /me which seems like it would break your private page.
- SMS number is exposed in the api response, which could be bad for public pages.