Removes id only if token is the device currently holding it. Returns true when a binding was actually removed. A drop from a device that does not hold id — a collision-refused newcomer, a stale callback after clear, a peer that never bound at all — is a no-op, so the incumbent survives.