Reply To: Why is there no ajax on profile tabs?
With standard buddypress (no modifications) you can freely view anyone’s messages without even logging in. Personally I think that is not very good security/privacy, whatever you want to call it.
I made a ticket as I don’t think that “private messages” should be publicly viewable
(https://buddypress.trac.wordpress.org/ticket/6504#ticket)
What privacy/security checks would you recommend for people who don’t want users private data publicly viewable?