We use them in classroms in a high school, so usage is very high.
Some are configured in pure kiosk, whereby, a user launches the browser, is presented with a captive portal, signs in with AD credentials, then gets appropriate web filtering for their user level. Staff, Student etc. As soon as the browser is closed, the session is destroyed, and the next user needs to sign in to the portal.
Another way we have them set up, is almost standard, whereby a user signs in to the device with their enterprise google credentials, but the devices are configured to not save any local data, so when the user logs out, their account is removed from the device.
The first way is probably closest to what you need, though both have their advantages.