KDE Plasma desktop and apps also have a Kiosk mode/framework for deployment and lockdown built-in, that can come in handy
Kiosk - Simple configuration management for large deployment
The Kiosk framework provides a set of features that makes it possible to easily and powerfully restrict the capabilities of a KDE environment.
Introduction
The Kiosk framework provides a set of features that makes it possible to easily and powerfully restrict the capabilities of a KDE environment based on user and group credentials. In addition to an introductory overview, this article covers configuration setting lock down, action and resource restrictions, assigning profiles to users and groups and more.