I believe this behavior should not be considered “expected by default,” especially for modern community platforms.
On major social networks like Facebook, users cannot post directly on someone else’s profile by default. This feature is either:
In other words, Facebook treats “posting on someone else’s profile” as a privacy-sensitive feature, not something that should be automatically enabled for all members.
Allowing members to post on other users’ profile activity feeds by default can easily lead to:
This is especially risky in communities where members don’t necessarily know each other personally.
Most users today assume their profile is a personal space. They expect that only they (or admins/moderators) can publish content there unless they explicitly allow others.
When a platform enables this by default, it creates confusion and frustration because members suddenly see posts appearing on their profile that they didn’t approve.
A better approach would be:
That is how modern platforms handle this feature, and it’s the most logical setup for privacy and moderation.
So while BuddyBoss may allow this by default, it’s not aligned with current social media standards. Facebook and similar platforms treat this as a controlled permission feature, and it should be something the user can enable manually — not something that is automatically open.
For this reason, we prefer to disable it by default to protect members and improve the user experience.