You are right, it's really not cut and dry in today's age.

Could be something like the way I have my son's tablet setup. If he tries to install something, I get a notification to approve it on my phone.

I can disable or enable the device at any point and have active times setup on it so it automatically does that if I'm not manually managing it.

BUT, that requires the parent to be actively engaging in what their kids are doing while trying to not be helicopters over them. You can setup home networks to block stuff like that also, but that requires some technical knowledge that a lot of people may not want to deal with. Also, that has no bearing on what is done outside of the home.

Also the age of the kid is a huge factor, a 13 year old is going to have a higher ability to get around those restrictions.

So now we're at the point of basically saying, there's not a really good defined way of doing that. However, if we ask for a copy of your ID, that's adds a decent protective layer. BUUUT, that's going to throw up red flags to everyone who wants to protect themselves and doesn't want their info out there like that. Which we all know there are data breaches and bad actors out there (like Tesla employees sharing videos from people's cars) so it's reasonable to not want to provide stuff like that.

Now at this point we're kinda back to square one what can be done to manage this, be secure, and appease both sides of the table?