In a public Discourse instance, how do I make it impossible to list all users

[Falco]

@meglio

Is this correct behaviour provided I disabled the users directory?

That setting objective, AFAIK, is only to remove the user leaderboard.

@meglio

Also, when you’re saying the list will still be exposed via API, do you mean to all anonymous users?

Yes.