How do I disable a local account on macOS Sequoia

How do you completely disable a local account on macOS Sequoia so it cannot login at all: * From the login screen * Over SSH (if that is enabled) * From the command-line (e.g., using sudo -u _user_ -i) In the past I asked this question: * How to disable account on OS X Mavericks The solution then was to set the account's login shell to /usr/bin/false but this no longer prevents login from the login screen. There are also suggestions to hide the account using sudo dscl . create /Users/UserName IsHidden 1 But apparently, it is still possible to enter the username manually on the login screen. What is the correct way to completely disabling an account without deleting it?