Probably first to invite only (like they are doing with Age Verification) and from there moving to a VRC+ based system. And from VRC+, to open to everyone (assuming they agree to specific data storage terms). Like how Roblox has their Oauth: OAuth 2.0 Authentication | Documentation - Roblox Creator Hub