I can't see anything wrong in the image attached.. can you please provide more details?
Of course
I don't know relay that is a bug or not.
Look at the address bar, I can see personal information of users when I'm not registered and can collect more information of users by a little spider :nerd:
I think you can protect of users personal information by adding several lines to .htacess .