"any way we can (incl. switching to approval-mode registrations)"
So you're not going to force new signups onto your instance by default, simply because you're the biggest instance and you control the Mastodon source code *and* the Mastodon name-branded app?
Might want to reign back some of your plans for world conquest, eh?