Best Kiosk Setup for Public Library PCs (Cloud-Only, File Explorer and Printing Issues)??

I’m trying to configure kiosk devices for a public library. I’ve tested configuring kiosks through the Intune Template option, where you can select a single app or multiple apps. However, I ran into an issue with the Start menu configuration — I want to display only Chrome, Edge, and the Downloads folder (via File Explorer).

I then decided to switch to a custom OMA-URI configuration using an XML string

<AssignedAccessConfiguration 
    xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config" 
    xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config" 
    xmlns:v5="http://schemas.microsoft.com/AssignedAccess/2022/config">
    <Profiles>
        <Profile Id="{7877df8d78fd7f8d7fdf-a454a45ae45-7sd777}">
            <AllAppsList>
                <AllowedApps>
                    <App DesktopAppPath="%ProgramFiles%\Google\Chrome\Application\chrome.exe"/>
                    <App DesktopAppPath="%SystemRoot%\explorer.exe"/>
                </AllowedApps>
            </AllAppsList>
            <v5:StartPins>
                <![CDATA[ 
                    { 
                        "pinnedList": [ 
                            { "desktopAppLink": "%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" },
                            { "desktopAppLink": "%SystemRoot%\\explorer.exe" }
                        ] 
                    } 
                ]]>
            </v5:StartPins>
            <Taskbar ShowTaskbar="true"/>
        </Profile>
    </Profiles>
    <Configs>
        <Config>
            <AutoLogonAccount rs5:DisplayName="kioskläge"/>
            <DefaultProfile Id="{7877df8d78fd7f8d7fdf-a454a45ae45-7sd777}"/> 
        </Config>
    </Configs>
</AssignedAccessConfiguration>

The problem is that File Explorer doesn’t appear on the Start menu, while Chrome launches correctly (because I use a PowerShell script for that).

Based on your experience — what would be the best setup for public library computers that run pure cloud (no domain join), where public users will download documents and print them?
If printing is required, would Universal Print be the best option, considering that the printers are on-premises?