by default a new customer can add domains without your knowledge, thus get them for free, while it will cost the MSP more money. Yes there are resource groups, but these are a PITA and if you forget to assign one, its no good. So there needs to be a set of default permissions or a default resource group to stop customers adding doamins or changing subscription.