Preferably they won’t be using devices vulnerable to ransomware. So have them run a tablet with iPadOS or Android. But make sure it’s from a manufacturer that q

Preferably they won’t be using devices vulnerable to ransomware. So have them run a tablet with iPadOS or Android. But make sure it’s from a manufacturer that quickly provides security patches (Apple, Google Pixel, etc). Then if you can lock the device down to child safety mode and combine it with corporate security settings. Then enable iCloud backup (or whatever the Android equivalent is.)