Public signup stays controlled: activate your account by email first, then request product access from inside the app.
We use a waitlist-based access flow to protect the product while still allowing public registrations.