I added a password to the kiosk to try that out in terms of setting only some things available and let someone knock themselves out using that. It seems pretty robust, even I could not use task manager to run things outside, alt tab or anything.
However I ran into a problem when I terminated all of the kiosk exe’s and everything vanished with no way to get back to the real desktop!
Would it not be better to detect if kiosk has been terminated or crashed and attempt to restart it and upon repeated failures bring up a separate basic program that asks for the kiosk password to release access back to the real computer desktop?