They've never asked me to create a separate account, only turn over the main account. I still don't trust anyone with my user account, and so made one name AppleSupport, and enabled FileVault on my user.

One would think that for a company so concerned with internal privacy they would care a little more for their users...