M2P Protection for Members Area

When I send a friend request, within the email I have two links

To view all of your pending friendship requests: https://christiangayschat.com/members-area/mary/friends/requests/

To view CEO's profile: https://christiangayschat.com/members-area/ceo/

If I click on the first link I am taken to Login page - Perfect.
If I click on the second link I can view the person's profile without being logged in - Not Good. See screenshot.

Both are in /members-area/ which is protected. Why is one protected and the other not?