Absolutely expected on both counts, unfortunately.
Profile posts don't support BB code so there's no facility to specify a link with some text, it will just link the link (if that makes sense).
Private nodes are private, therefore the HTTP client on your server (which isn't authenticated) cannot see the private nodes, just like guests / Google can't etc.