You are right. I think the blockchain wallet api webservice is for merchants. So it is possible to create accounts for the merchant users and the users don't have direct access to the wallet. It's also a feature of the blockchain wallet api webservice.