The issue is discussed here:
‘Find in searches’ exposes the user ids publicly. They’re obviously not visible directly on the page but it’s possible to access this data if you know what you’re doing which is a secruity risk. I’ve raised it with Bubble too.