Is there any way to configure a Mail profile with the Google payload yet keep student's from modifying other accounts? I realize it works if I check the option allowing account changes but I am pretty confident users will change apple ids to their personal one during that time frame and download games etc.

Also the email address for a user is not coming across appropriately from Apple School Manager to JSS. It doesn't contain the period in between first name and last name.

Example:
Should be and is set to this in ASM: firstname.lastname@domain.org
Syncs in JSS as: firstnamelastname@domain.org