It’s probably because user profiles send this HTTP header:
x-robots-tag: noindex
You can see it if you run this command in a terminal, replacing <url> with the URL of a user profile:
curl -sSL -D - -o /dev/null <url>
If you remove the robots.txt rule, Google will see that header and deindex the URLs.
Google’s documentation: