It is actually sound practice to make outgoing user profile links nofollow, because they are usually “not vetted”.

Users can put paid links or links to for example gambling sites there. That type of links could be penalized by Google, especially if many users do after they turn inactive, so nofollow is recommended.