Data API and Privacy Rules

I was looking at the Data API section and Privacy rules of bubble and i will like more understanding.

So i will use Instagram as a sample to better explain my question.
Instagram allows users to like any POST which is basically a list of users. So if i’m creating a privacy rule for Instagram every user should have access of MODIFYING AN INSTAGRAM POST’S LIKE VIA API, so they can either like or unlike the post.

But thinking about it, if every user has the access to modify the like of a post, they can easily mess with likes(e.g removing all likes)

So is it possible to allow the user to modify the like but limiting access to only his account so he can just like or unlike?