Comment 4 for bug 489136

The main issue now that users-admin uses adduser for most settings is that we'd need to move all profile handling logic to the backends, and then rely on the platform's tools (here adduser) if possible. There need to be a fallback since not all platforms (will) support this feature.

For sure, that won't happen this cycle. It would be good to think more about this to see what other improvements we can bring by moving to this new behavior, so that we don't redesign the protocol at every version.

Another concern is that the Unprivileged profile doesn't really work ATM, since most system groups we show aren't used anymore. So this account type is basically as powerful as a standard Desktop user (see bug 326135).