If anyone types in "/index.php?option=com_userlist" after my web site address,  they can see my user list.  a pretty easy hack.  Is there some way to secure this for prying eyes?                 

I can't get the userlist user search function to work.  Is this function designed to work with community builder?