You are right, current_user is the wrong user to filter by. I will change that. 
But concerning the visibility I think that this number should show the activity of the user. Thus, it should not be limited to the visible scope of the current user. It is also not a security thing since it is just a number.