Hundreds of organisations claimed through public portals working exactly as configured. The guest user profile is a permission set nobody designed.