Super user profile is public

Hello everyone!
Now you can know my website super user name very easily.

Just come and register your account then edit your profile url.
The old url of your profile will still work and will become the supper user profile page directly and the formatted name "username" will be shown on it.


I know that some people might ask me to make formatted name hidden from the profile page but I still need this feature.
Other recommendation might be switching off the ability of editing profile url feild but even though I do that from admin panel and the result still the same.

The old url becomes my superuser page and every details appears as the site settings.

joomla 3.9.12
CB 2.4.2+build.2019.09.28.14.48.29.12ea86b4a

Update:::

I tried to insert incorrect profile URLs randomly without being registered on the system and it takes me to the supper user profile page and all my details shown for public.

Supers user profiles are not just automatically hidden. They have the same access check as any other profile, which is the "Profile View Access Level" parameter in CB > Configuration > User Profile. Set it to Registered if you don't want profiles accessed. If you want per-profile privacy you need CB Privacy to do that. I've no idea what you're referring to in regards to profile URLs. You can not set your profile URL to someone elses username or someone elses profile URL. If a profile URL is invalid it'll send you to an error page or redirect you back to your own profile (if logged in).