I don't really see "registered users only" as a high-security feature, but access-list-only is. So I agree it would be good to have some way to indicate that, so your access list doesn't pass on information they think is public and you think is private. But I do have a slight concern about a text notice of such on the userinfo page looking ugly or taking up too much space.