In my Arch Linux setup(and most others), the default user is non-root. Any admin work needs access to root account which is given temporarily with a password(generally using programs like sudo and doas).
I have recently rooted an Android phone(Redmi 4X "santoni") and installed LineageOS (android 9 version). I have TWRP, Magisk installed.
I want to setup an account which is non-admin, ie: no app can ever request superuser access and the Magisk Manager App,TWRP app will not even be visible to the user. How do I go about it?
In LineageOS' system settings there is an option called multiple users. However when I have used the "guest account" there, it still seems to have root access, ie:apps can request superuser access and Magisk is accessible too.
I looked around online but didn't find anything substantial which catered to my specific question.