[pbhjpbhj]

I currently run my kids browsers under my user by doing "xhost +local:; su -l -c /usr/bin/firefox $USERNAME" where USERNAME is the kids login. I may have made changes to enable that, don't recall sorry.

[digi_owl]

An extra layer of protection may be offered by using the likes of xpra.

https://xpra.org/