Perhaps a lot of key folders such as Documents, pictures, etc should also be readonly or denied access to prevent someone from using those temp profile folders and beliving data would persist.

Or maybe a temp profiles directory structure shouldn't be visually similar or identical to a full a profile.

Lots of low hanging fruit here.