That’s how BP works. There is almost no security, privacy and member management built into BP. The focus is on expanding features.
There are various efforts underway to bolt better management on via plugins etc. This plugin for example offers new member moderation.
Jeff Sayre is working on a privacy component, but apparently has decided he needs to be compensated – and rightly so!