Is OpenBSD secure by default from ssh users?

[steamrent]

Say for instance I create a new user on a default install of OpenBSD, and the home directory for this user being /home/user/.

If the user ssh's in, how much restricted access does he have outside of his own home directory? Is there anything sensitive such as files with information I may not want this user viewing or altering? Is there a way I can restrict this user to viewing/modifying his own home directory only, and not being able to view/modify anything outside of it?