IMO you want to avoid becoming your family's CTO. Its look like fun over on r/homelab but unless your learning skills for a future job its hard work and easy to

IMO you want to avoid becoming your family's CTO. Its look like fun over on r/homelab but unless your learning skills for a future job its hard work and easy to loose data. For browsers I find uBlock and/or Microsoft Edge. Edge has good privacy controls that works out of the box. I think uBlock is better than DNS-level blocking tools as the latter might break some sites, with the browser extension you can turn it off in those cases. Be sure to get uBlock from a legitimate source. For my grandparents I've found buying them an iPad and/or iPhone to be the best. The attack surface is significantly reduced. No unauthorized apps, iOS has built in Parental Controls, AppStore purchases can be easily reversed and the device can be reset fast. iCloud is expensive but with family sharing it allows me to ensure their photos and emails don't get lost w/o me having to maintain backups. If that is not an option and a computer is required I typically setup a non-admin account for the user. I keep an admin account. I use TeamViewer to remote into the computer to fix things when they go wrong. Passwords are an issue. I use a family subscription to 1Password. In terms of email, I have briefed them on phishing email. If there is a call to attention with an unreasonable deadline, or they mention shutting things down permanently, or want to involve the law/police or its for some unreasonable charge then I tell them to ignore it and always ask me for my opinion. Never click the link in the email for banks. Log in directly or call the bank directly using the # on the back of the card not in the email. I have set up some rules so that emails originating from addresses of our family members and their friends (programmed in address book) go to inbox and everything else goes to another folder.