so vulnerable to buying by anonymous accounts and then reselling.
Make the smart contract that forbids multiple transfers, or make transfer more expensive after the initial purchase (unless authorized by some pre-approved address and/or an address that has an associated real ID)
why is that needed?
Because we’d like to have a system that can not be manipulated or controlled by a single entity?