From a privacy perspective it’d be annoying if the default weren’t one-identity-per-website, though. That’s how it ought to work. If the user then wants to instead use a single one (akin to how OAuth logins allow you to use a single identity for auth purposes) that’s on them, but it should not work that way without explicit enabling.