Problem is, the user can trivially circumvent it. And you can bet that your kids will do that.

Much better to force all their network traffic through a network node which *you* control, and install your filters on there.