+Continue keeping it an opt-out feature. But give a long lead time. A month or two. Regular emails warning that profile will go public and a personalized screenshot of what exactly would be included. +If users want to approve the public profile, they will stop receiving these emails. They should also be able to choose who to show in their profiles. +If users forget to approve or deny, make an extremely minimalist profile public with only initials of the name listed.
Sure, they sent out an innocuous-looking email that didn't actually describe the important details of what was happening, on a Friday, hid opting out in low contrast on a page where it would be unexpected to find it, and made deleting accounts so difficult that I would have never found it if someone hadn't posted it here, and it requires a government ID to do it.
But sure, all these dark patterns were unintentional--they didn't mean to.