I'm pretty sure everybody was 'opted-in' to this feature by default. Afaik I have never actively enabled it and yet I'm in the leak. I provided FB my phone number for 2FA purposes. I'm dumbfounded if they actually allowed people to look up my profile with my 2FA info.