Third-party accounts log into an account without verification

This is not a bug, we manually validate emails for providers who do not give us a validated email first.

And for those that do validate (Google, Facebook, Yahoo) it is valid to map them to email which we view as one of the primary keys for the account.