Don’t onboard them to KYC wallets, obviously. Start with Phoenix. You can’t get a Lightning address there, but for that you can show them Zeus or Minibits and explain how Lightning and Cashu work together.