Report/security/report security check openprofiles
From Learnit docs
Template:Security overview reportUser profiles should not be open to the web without authentication, both for privacy reasons and because spammers then have a platform to publish spam on your site.
