I'm bulding a small web application using mongodb and just thought if it's a good practice to show mongoIds publicly, in urls for example.

Now I'm using the following url structure for user profiles: <http://example.com/user/MONGOID>

Does this have any security flaws or is it discouraged in some other way?