Currently, employees using their company email, can create other free Hubspot accounts. Hubspot restricts settings changes to users that have more than one Hubspot organization ID.
This means that their Hubspot employee account gets restricted from making updates - this includes changing photos, titles, etc.
If an employee is using a company connected account, it should restrict access from their ability to create other accounts, at least without approval.