You don’t even have to comment to get profiled by upvotes. I’ve never commented or even subbed to a local community, but in the past I had occasionally upvoted.
If it was just the home instance’s admins having access to it that would be normal. Having it be completely public empowers doxxers of both the malicious and marketing types.