Ensuring that a stopped desktop explorer.exe doesn’t get (re)started by various events? [duplicate]

I have a very simple “kiosk” style Windows 11 Pro setup where I disabled the loading of the desktop environment (explorer.exe) at (auto) login, and run a startup AHK script to disable pretty much every possible shortcut key.

So it’s not a real kiosk in the strictest sense, just operates as one.

(It’s internet connected and is supposed to run 24/7 let’s say in a backyard for some neighbourhood gradeschool kids and display one or a few custom applications.)

I’m not super worried that they’ll leet hax my machine with their pocket dolphins, but I am worried that some windows maintenance process or a plug-unplug of a monitor or some other system event might cause something to (re)start Explorer.exe thus granting access to the desktop, which I need to prevent.

(Windows updates are completely disabled for the time being.)

Is there something I should worry about, or is there a way to ensure explorer can’t start, unless an administrator password is entered? (UAC is set to ask for password on any elevation attempt)

PS: I can’t use an actual kiosk for various reasons. And it’s generally a casual environment where convenience & flexibility (and time constraints) are key.