I’d recommend checking out Introducing Discourse developer toolbar. The integration with core means it can provide a more robust experience, and include more plugin outlets.
user-profile-secondary correctly hides/shows there.
I’ll add a note about core’s new plugin-outlet feature in the OP. Hope that’s ok @RGJ. Perhaps we could also update the theme-component itself with some kind of deprecation message?