Closing it off from the web defeats its use case. Limiting sign ups is probably a good first step.. but Does this problem still exist in v1 (pending release)

Seems like a glaring issue like this should be more broadly discussed. Especially for a codebase that is so regularly utilized by the Bitcoin Lightning community