Running fewer commands as root is more significant risk reduction than having an extra user. I won’t be replying further since I’m simply repeating what others have already said. If you sincerely don’t understand, I suggest doing additional research on your own.
DDG is abysmal for technical subjects such as programming. When searching for anything mildly specific in that arena, I nearly always need to re-search on a different engine to find anything useful