Members manage their own profile, privacy, and security from /account/ — no wp-admin access required.