Anonymous users can use plugins to bypass restrictions to access User Profile information

Set the permissions so that anonymous users cannot see the User Profiles

Example: Install the Metadata 2 plugin, and use wiki markup:

{users-report:User,Location,Email,Extension,Cell Phone}

If the page is visible to an anonymous user, then they are able to see the information from the user profile.

This information is supposed to be restricted by the permissions, and this should also be respected by macros.