But let me summarize: you make a lot of noise for basically nothing
It is not basically nothing. It is a security fault, NX or Apple or another SW. A user may authenticate and use another one account.
and in the end your problem is that now you have to pay a moderate amount for the privilege of running such a (in your words) wonderful terminal server
I did not talk about paying.