Third-party accounts log into an account without verification

[supermathie (Michael Brown)]

@stuartpb

Associating a new endpoint with an existing account should require verification from an already-authorized endpoint.

I do agree with you on this point - if there’s demand for it I could see the benefit of a site setting to enable that.