Anybody can create a community account. Some people like to not show that they're logged in, some people don't care. There's an option to not show. The default is to show. Unfortunately, new accounts are shown before someone would opt to not show.
This isn't a privacy issue. No one knows who you are other than maybe your first name is Pete and you might be an older gentleman. You have given those pieces of privacy away yourself. Or not, if it's not real.
I suppose they could flip the default so that people would have to choose to show logged in. I suppose they could also not have those lists on the community page and just show the stats of who all is logged in and "guests". Click on users online and it would only show those users who opted to show themselves.
But then as one participates in the community then their usernames would show.
All this to say...the internet has always had people trying to scrape some money out or to find ways in to your internet device. Don't click on links.
