Feed items are not filtered by reading access, so a user could potentially see feed items for a profile that the user should not be able to see.