The fact that the default option in Figma is now that anyone can upgrade themselves into a paid seat without explicit approval from an administrator is completely outrageous and absolute bad practice.

I am administrating our Figma team, in which I have currently three full-paid seats assigned to my colleagues. A few weeks ago, I received an email that a person outside of our organization has been upgraded to a full-paid seat; without anyone from our team having approved this. I restricted his access, but still had to pay the bill. Today, this happened again; apparently via the shared link to the board. Finally, I found the option to change the default into viewer-restricted seats. You guys have heard about dark patterns, right?

Additionally (even though I am not an expert here), the fact that a person is not explicitly asked to approve a purchase is, as far as I know, against EU law.

I previously had a discussion with our accounting team, why we are paying a Figma account for a person not in our organization, and now I have to have this discussion again, which makes me look like an idiot.

If this continues, I am going to quit Figma and move over to Adobe XD.

I hope you change this very soon.