[rebase-vc]

just came here to add that the problem is that the default is to make the profile URL publicly visible. the default should be that it is INVISIBLE and then the user opts into visibility