My workaround, used in the small company I own is to create a Standard (or Managed) user account from a single Admin user account, then make the Admin account hidden using Terminal. I have a couple of Macs for my clients' use that just have the Guest user account enabled, with the Admin user account hidden - the KISS principle for their usage needs.