Those are the easiest step for many with elders. In HomeLab settings, I also do the following: - Block all DNS, including all DoT/DoH servers by IP; set up ow

Those are the easiest step for many with elders. In HomeLab settings, I also do the following: - Block all DNS, including all DoT/DoH servers by IP; set up own DNS server, auto download DNS black holes using family-friendly open DNS lists/servers. - transparent HTTPS proxy; maintain various ICAP servers to protect (AV, PPI leakage prevention, HTTP block list) - open a private WebDAV server for many internal use; ownCloud, netCloud, ... - WireGuard variants; TrueScale, ZeroScale, ... - MDM; get those phones under your control