That’s just a tiny example of the data that can be abused. In this instance, the existence of a profile at all is abusable data, and there’s not much of a way around that other than being able to trust the application.