This looks to be a bug with not using a member profile URL format that uses ids in the URLs. Without the ID it uses a regular expression to try to scan the database for the closest match --- and they aren't being properly filtered.
Maybe, a setting/configuration within VB that was missed that...