Private Accounts (also sometimes referred to as Locked Down Accounts) require explicit follow approvals and many federated actions are restricted only to direct followers. It's an easy task if you are an instance admin creating all accounts to default new accounts to Private instead Public (which is the usual default elsewhere). Accounts can switch themselves between Private and Public as needs change (though there are obvious caveats when switching).