> treating your PC like a multi-user system that has an admin by default, etc.

I think I have the opposite orientation: In the past when family and friends needed help to install/rescue their machine (on Windows versions that supported it) I always ensured there was a separate "Manager" admin login and then made their main account "limited", albeit with UAC popups.

If nothing else, it made repeat visits much easier.