Some quick solutions would be:
Use cloudflare’s 1.1.1.3 and 1.0.0.3 DNS. At least this works on the device as long as they don’t change the DNS on the device themselves.
developers.cloudflare.com/1.1.1.1/setup/#1111-for…
Parental control settings on your router.