Seems I either turn it OFF and have great security issues as I can't trust ALL of my users or have it on and loose out on some potential users!
I thought XOOPS creator(s) would have made it as standard that ALL users on the Internet with or without firewall protection could register!