Locking down and/or outright refusing to enable purchases is one of the first steps taken when getting my kids new devices. The most recent setup of my daughter's new PC in Windows 10 was easier than it had been on iOS for her iPhone.
I was going to write more details, but I don't feel comfortable recounting other people's personal details. I could anonymize it but that would make it sound contrived. As someone who's daily job is consulting and helping solve tough technical problems for non-technical clients, I feel for these parents being overwhelmed. I can see how the technology is not always on their side when considering the marketing towards their kids and the type of e-commerce dark patterns.
I concur. I work with ACLs and permissions on a daily basis, my wife doesn't. This affinity for permissions structures rears it's head when she is entirely frustrated when setting up whitelisting for my daughter's MS account.
Apple, for an example, has a "master" account which controls billing. All purchases made on any associated family account are routed through this master account.
My wife's purchases don't require approval, but all child accounts do.
Microsoft's account structuring is very similar.