Is there a way to globally disable profile pages? I was a little surprised to find they are accessible to logged out users, enabled by default in version 23, and must be disabled for each user one by one.
I suppose I can also block any requests with a path starting with /u/ at my reverse proxy.