Hiding all data
I suggest to hide all inside data (profile, activity, topics et c. et c.) from public access, even from deep links, scans or crawl.
Also, the default configuration should be set this way.
The administrator will expose the data if and when he will see fit.
(ideally, with user consent)