Limitations include no access to system files, other users' data, or app installations. To set up a secure guest account, create a standard user named Guest User and add it to the Guest group.