@leocg Thanks for your response. To use any online service almost always requires a "password", thus, by definition, the htpc would have "sensitive" content in the form. The question is whether the access to the "sensitive" content is available to any user or just a select few (administrators). A password to block settings makes the most sense. An alternative is to not use a web browser as an htpc interface, but it's the power that an web browser can supply that makes it the most useful interface compared to something like plex or kodi. A web browser is an all-in-one solution for all media types from movies, live tv, news articles, music, games, etc. A Smart TV/Roku can do some things a web browser can, but a web browser can do almost everything in comparison and usually far better.
Add the power of Windows too and you can now have an htpc with PC games, Xbox streaming, Game console emulators etc. A password to lock access to the Password Manager just makes much more sense than to limit the system.