Open assets/snippets/weblogin/websignup.inc.php.
At around line 119 try replacing :
// save user attributes
$sql = "INSERT INTO ".$modx->getFullTableName("web_user_attributes")." (internalKey, fullname, email, zip, state, country)
VALUES($key, '$fullname', '$email', '$zip', '$state', '$country');";
With :
// save user attributes
$sql = "INSERT INTO ".$modx->getFullTableName("web_user_attributes")." (internalKey, fullname, email, zip, state, country, blocked)
VALUES($key, '$fullname', '$email', '$zip', '$state', '$country', '1');";
That
should(untested) set each new web user to blocked on registration.