Would I be correct in thinking that the users table is limited in that it doesn't identify LDAP users on the box?

I think it depends on the NSS configuration. The osquery table uses the getent API to enumerate all local databases.