So, finally the solution in my case was simple: I just enabled in PERM for level unauth user the VIEW person profil.

(( it seems that I will never have a deeper understanding how UNAVERSE permission and visibility and module settings and all dependencies cooperate as there seem to be unlimited combinations.... 😅))