Users cannot sign up and buy instantly. Every application is manually reviewed before a password setup link is issued.