On a fresh installation of Jenkins with no jobs at all, administrators see the "Welcome to Jenkins" message on the first page, where they can configure a job or read further information about Jenkins. This message is not shown to users with Overall/Read permissions, they see a blank page.
However, a newly created user with Overall/Read permissions can head to baseUrl/user/<userName>/my-views/view/all/ and setup a job from there:
They actually can't create a new job, unless they explicitly have Job/Create granted, but the button and the job configuration overview shouldn't be shown nevertheless.