Does it necessarily need exploits? I might be wrong, but I believe games running in wine can access any file your user can. It should still be able to delete, edit or encrypt them. Wine just translates calls, it doesn’t create a locked down container or anything iirc
You don’t need an account. De-bloating scripts take care of most other annoyances. You can fairly easily beat windows into submission