Egregoros

The only solution is to give a "power user" option for administrators on clean install that disables all the crap for people that know how to use computers. It must not be changed after install, or user account creation since they will do that once rumors of the mythical power user mode come to light. Or allow a "power user" administrator to change it afterwards for other users.

Tangent: To my knowledge Linux DEs not supporting the whole "administrator with root privileges is another user" that Windows has is a large mistake. If I install Mint for someone that just opens a browser once a week and enable automatic updates for them, they shouldn't be allowed privilege escalation rights, but instead a separate "admin" user (me) should have those (with a different user password of course).