So far it seems like there's no way (short of a lawsuit) to block this completely. Instance admins can (and should) do web server hacks to block their own users from logging into the app.