if you are able to do anything with the account without eKYC completed, then it is a problem
if anybody can just register but cannot complete eKYC and cannot do anything with the account, then not really a problem
even better if account is auto deleted and phone number used for OTP flagged if eKYC not completed within x days of being registered