Category moderators can't access hidden user profiles

The whole /u route is disallowed in both default robots.txt and receive a x-robots-tag: noindex header. There is also hide user profiles from public.

Not sure about the first.