This module uses the loadByProperties() method, which is handy, but... it disables access checks.
The case I faced - I have the setup with a domain + domain_entity modules as I need to separate social login entities per domain.
Thes modules alters the queries to prevent entities from appearing on other domains, but it needs an "ENTITY_TYPE_ID_access" query tag, which is ignored by the usage of loadByProperties().
The contrib module should not decide on not using access checks for the queries, this should developers decision.
The suggested solution is to replace the loadByProperties with an entity query.
Fixed
4.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Thank you both! Changes look good and committed to 4.0.x and 3.x branches.
Automatically closed - issue fixed for 2 weeks with no activity.