Maybe that is relevant to home users but there's no relevance to today's outage. And if you're in a business setting I'm not sure why you wouldn't be using a domain controller and/or Entra ID and Intune to manage your Windows endpoints.

A third party s/w crashed because users failed to validate deployments. So from MS perspective users can't be trusted and need to be further locked down.

You can still use local users, you just have to work a little harder to do so.

for me that translates as opt-out friction, vs it just opts right in.