It would be great to get an official DNN corp. response as to how the autocomplete or user search in messaging module is designed to work.  Currently in 7.0 autocomplete will find anyone and allow the user to send a message.  I've read forum information that autocomlete should only find Friends and Group members. How is this designed to work?  Is finding any user a bug?  I personally believe that the current configuration introduces serious privacy issues and should be redesigned, if in fact this is the way the module was intended to work.