It will return 403 with a empty response according to privacy preferences of target user.

If you try with your own profile after changing all privacy preferences to public, then you will get the expected response.