Only let staff unlink social accounts?

Another solution might be to put the ID in a user custom field and update it via the API. Or have a plugin do that when they login. (I didn’t read the whole topic carefully).