Security-wise you set it not to run commands (and maybe chroot) and you're done, right? And difficulty-wise isn't granting SSH access very similar to FTP access?
I don't understand the issue.
But in the most common case a "system account" is a line in two text files, isn't it?