> Get a user to stop logging in as root. It really depends if the machine is hosting anything that you don't want some users to access. If the machine is singl

> Get a user to stop logging in as root. It really depends if the machine is hosting anything that you don't want some users to access. If the machine is single-purpose and any user is already able to access everything valuable from it (DB with customer data, etc) or trivially elevate to root (via sudo, docker access, etc) then it's just pointless extra typing and security theatre.