That's how I set up the in-laws laptop with Windows 10. I kept all admin privileges in a separate account with a password only I know. They both get their own unprivileged user accounts, with the standard protections turned on (Firewall, Defender). Haven't had an issue so far, and it's been about 6 months.