I read this as user & profile are two separate resources. With a standard REST API, calls are tied to a specific resource.

Nothing stops you building another layer of endpoints to service your frontend.

They could've added a new endpoint for that specific usecase but I'm assuming they've simplified their actual needs to this one example.