Yes, they _can_ be disabled (in fact Guest is that already by default) and
they can also be renamed. Only _not_ removed.
Those accounts are called built-in, because basically they are not defined
like any other account but inherently present in the system.