I'm fine with admins being able to link accounts; I'm sure that's very useful for spam prevention. But ideally, I don't want members of the public to be able to link accounts. Maybe you're right; maybe it is hopeless against the most sophisticated actors.