User profiles should not be open to the web without authentication, both for privacy reasons and because spammers then have a platform to publish spam on your site.