But that is one reason I do use sudo.

I have some extra user accounts that I can sudo into to run scripts, plugins etc from e.g., github that I trust somewhat but not 100 percent. In case they do start mining bitcoins or sending spam mail I will find out and stop it.

If that's your threat model (untrusted script = owned) then don't even bother creating a user account. Just run as root.