osbase77 opened omacom/omarchy#16100 to add administrator and limited accounts. The open proposal keeps the existing setup until a second account is added, then separates the shared disk password from the owner's login password, locks root and disables automatic login. Limited users would receive an explanation instead of an unusable sudo prompt when attempting updates or package changes.
After interruption and locking concerns, osbase77 reported changing the sequence so protection is applied before creating the second account. An interrupted operation should therefore leave the existing account more protected, with a later run completing the transition. The account-change lock is now described as root-owned and accessible only to root. osbase77 reports checking both behaviors on an encrypted installation in omacom/omarchy#16100:issuecomment-6301761759; these remain author-reported results for an unmerged proposal.
