User URLs not hyperlinked at low trust levels

Yes, this is a feature. If it wasn’t this way, you’d have tons of spam user accounts.