That is right. But you need to reduce friction in signup to allow user to explore app. So a better way could be Signup => Allow them in but say that email conf

That is right. But you need to reduce friction in signup to allow user to explore app. So a better way could be Signup => Allow them in but say that email confirmation is required for next login => Send email confirmation => Allow login only with confirmation.