We currently do free hosting, and have for years.
Each application is ran through manually, checking for obviously false names, addresses, etc. We also require free clients to re-authenticicate their email addresses periodically. Further, we check the content of some sites randomly, looking for warez or other TOS violations.
Its a good bit of work