Sorry, I missed that.
If you are following a link from a notification email it will automatically log you into the community when you click it, so changing the URL to another user’s profile in the same session will take you to that page because you are already logged in.