Im happy to say, I have zero proper security practices, 90% of my machines run as root >:3 also CONFIG_MULTIUSER=N is something I have done, so I funny enough cannot relate