External ID editable instead of view-only
Reproduced on https://wpmaster.demo.civicrm.org/
Go to a contact > edit > on the edit screen in the Contact Details pane, the External ID is editable.
As the external ID is a field for linking to a legacy database, it should not be able to be changed in the UI (and certainly not this easily by end users). The External ID can be changed IIRC by import using, for instance, deduping on Contact ID, so it should not always be read-only but only on this edit screen like Contact ID, which is the only place I can see where it is editable.
It may make sense to also remove it and Contact ID from the contact edit screen.