osbase77's omacom/omarchy#16100 remains open. It proposes separate administrator and limited accounts, a shared disk-unlock password distinct from personal login passwords, and disabled automatic login when several accounts exist.
In omacom/omarchy#16100:issuecomment-6386646585, 
lbssousa recommended gating limited-user migrations on an administrator's completed run and raised disk-password retention and single-owner biometric limitations. osbase77 replied that migration gating had been added, retained manual disk-password rotation and deferred per-user biometrics to separate work.
greptile-apps[bot] subsequently flagged a transition risk in omacom/omarchy#16100:discussion_r4368099902: the update introducing a machine-wide lock could overlap an updater still holding the old per-user lock. This is a review concern on an open proposal, not a shipped multi-user capability.
