How wallet-only signup usually works, why identity checks appear later, and what privacy expectations are realistic.