Only recommendation I have is to stay the hell away from Google's parental controls. Once you've turned it on, there is no way to remove it. It is a trap, pure and simple.
Cloudflare Family DNS and then a PiHole on top of that.
The biggest one though is not giving the kid a cellphone.
NextDNS.io plus the NextDNS app, and Screen Time and Restrictions on Apple platforms.
nextdns.io
Only recommendation I have is to stay the hell away from Google's parental controls. Once you've turned it on, there is no way to remove it. It is a trap, pure and simple.