I mostly use user accounts on locked devices that can only show the HA app with views specifically designed as such, which in turn limits the devices/entities viable to them.
I have them setup public watchlists in imdb and send me the Id and just explain that it checks the list every hour or so. It's hand off on my end that way.