That's a good idea, but if someone looks at the url and replaces their username or id with another person's username or id - they would see their friends instead, right?
As far as I understood you suggested to move the link to the Friends page to the dashboard page, correct?
You may just disable the Friends block on the View Person page and put this block only to the Dashboard page. In this case, only the owner will see his friends.
