Another idea:
Copy the .desktop files of apps you want to hide in the restricted users’ directory and set the keys
Hidden=true
NotShowIn=X-MeeGo
which will hide them from the launcher.
Be sure to disable developer mode for the user so they can’t launch Terminal, and set the permissions so the user can’t write to them.