That is one way things can work. Individual apps can have their own tokens, algorithms, and eligibility policies. For example they can easily ban anyone they want, which is one way to address some of these problems but is also much harder to do at the core level of a public blockchain.