Cell phone companies like AT&T could offer kid-lines (with filtered Internet access) and Google and Apple could provide kid-modes on their phones that don't allow VPNs or apps to be installed that parents do not approve of.

Maybe there might already be ways to prevent VPNs/apps, but it doesn't seem to be easy and/or publicized.