The current default configuration exposes the names and email addresses of all the users on the Yunohost instance in the Users tab because they are collected via LDAP. This is a big privacy issue, I would suggest to set the main.explore_ui.disable_users_page and main.explore_ui.require_signin_view options to yes by default when installing the app.