Can an ID provider access all services?

[kevhill]

Maybe I'm a bit confused, but if the only authentication done by the user is to the id providing service, couldn't any ID provider sign in to any connected service without the users' consent? This seems like a reasonable edge case when we use trusted centralized ID providers such as Google and FB, but seems very dangerous for decentralized services.