I am a parent. The devices my child uses have root certs that allow me to decrypt traffic that must pass through my proxy to be relayed to the internet. Voila. Problem solved with current tech.
Yes, and the next battle is ech-pinned params in apps. The browser can at least single that ech isn't supported. For apps, you'll just have to strip the ech and downgrade the connection and live with the server dropping you. But that's fine. My kids don't need tiktok if I, the parent, can't decrypt the info.