Disabling Public Profiles

Could a option be added to the configuration, that will allow the disabling of the public profile pages?

Company is seeing the user pages as a security risk. Especially the fact that the /u/root is visible from the outside without login.

Could the Projects, Groups and Snippets totally be hidden with this setting?