I know it doesn’t inherently fix the problem, but unless they really go poking or messing with it (most users wont) it should keep them contained to the subset of options tou want them to use.

What I would do is install kiosk mode from HACS. Build a dashboard for them that only shows what you want them to see, then add kiosk mode so they can’t access the menus. Set it as their default and it should be fine