Completely agree. There’s a few past posts from a few years ago asking for this.
I don’t want my kids having access to esphome, history, etc.
Also, they have their own dashboard, but by manipulating the url (simply replace their username with someone else’s in the address bar) they can access other peoples dashboards.
User accounts and access control to HA features needs some love to prevent this.