How do visitors see the user directory when hide_user_profiles_from_public is enabled?

[j.jaffeux (Joffrey Jaffeux)]

It’s a mix situation, it’s visible through the API, we don’t have a simple solution without potentially breaking other expectations. For now we preferred to clarify that it’s not an air tight protection.