I haven't really used Linux, but I feel it might be useful for a potential project. Is it possible, and how doable is it, to have a password locked admin account and an open user account which is heavily restricted on what they can do? As in, not even browse files. Preferrably only desktop access where they can launch the apps placed there. Which Linux would be the best for this while still being on the easier side to figure out? I do understand tech somewhat well and quite enjoy problem solving, so doesn't need to be ELI5 territory.
Gnome has a feature in the settings for selecting which current applications can be made available to other users. I think it may be a flatpak only feature though.
Also another user will not be able to access another user's files if they are encrypted with LUKS or systemd-homed.
Thanks! I'll check out Gnome too.