Cool stuff as in display a message that the account cannot login, which leads to brute-force service, process or other stuff system user names.
Failed logins will be logged either way.
I think still could go with the output of `type -P false`. Unless the project requests that feature of messaging to the (forbidden) user, its forbidden logins.
It could work even on embedded devices having only 'false' available.