Yah, that's a "closed org". When you need to deal with the public at large, you need to deal with user registration issues and spam.