I think this whole thing should just be removed. I think privacy access to user profiles is out of the scope of what this module is supposed to do. Even the redirecting to the homepage if you do not have access to the profile, should not be handled by this module.
I'll add that as an alternative proposed solution and people can discuss what would be the more useful approach.
- 🇺🇸United States azinck
I just want to add my vote that the change added in 📌 After logout due to inactivity , login redirection is not right Fixed was not appropriate for the scope of this module, and reflective of a very narrowly-considered use-case. It should be removed. There are a million other situations just like this where if a different user logs in they could end up on pages that they don't have access to. That's just intrinsic in the way this works. It's impossible and inappropriate to account for all of it.
I don't even think being able to set some sort of general redirect destination when the user doesn't have access to the destination page should be handled by this module. The `destination` functionality is part of Drupal core and can be set and used by a variety of modules, not just this module. There's no reason this module should modify its behavior. If some other module wants to take on that task then fine, but I think it's clearly outside the scope of this module.