New accounts should be limited to read-only for at least a month.