Can I control visibility of CiviCRM profiles that are used for "View/Edit Drupal User Account" using permissions and/or ACLs?
If this is problematic it could be easier to provide these as Webforms which have fine grained access settings