I think allowing people to use decentralised social network credentials to identify themselves to other online services is a great idea. Go for it!

FWIW I don't believe there's such a thing as "best privacy practice" in the abstract. As with security practice, whether a given practice is dangerously sloppy or crazy overkill depends entirely on your threat model. It's important too not to let perfection be the enemy of the better.