IT Pede reporting in....

The thing that blows my mind is the IT tech that reported seeing the time on the machines were off, and notifications that updates were pending. Additionally he also witnessed someone playing solitaire on one of these machines.

Remove-WindowsCapability

or

Dism

When you're setting up a windows machine to be a kiosk, you remove everything that can potentially be an attack vector. Remove the browser, remove the games, remove cortana, the list goes on.