is this really how it works?  I would think this is sort of scary -- if someone does this on edx.org, that means every user registered is enrolled?