None of them made it easy to disable my teen's Internet. They were unreliable and made it hard to see usage logs. They depended on MDM profiles from an opaque company and you have to trust them to not abuse your child's data.
I wanted:
* One-click enable/disable Internet on a per-child basis
* Per-child traffic logs
* Per-child restrictions (enforced by per-child DNS blocking)
The solution was to build my own proxy and MDM profile. evan-proxy makes it easy to manage your teen's internet access. It will run easily from the smallest cloud server or your home network (when exposed publicly). It's inexpensive to run: you can use a PiHole for DNS or a low-cost service like NextDNS, and the only mandatory service is the MDM manager (I use SimpleMDM).
It's written in Go and includes a Helm chart for quick deployment.