There is a fine line between doing this to protect IP and actual privacy abuse - and as we're treading it's important to remember how important context is.

This is absolutely a best practice in some corporate environments for DLP. There's no better way to ensure sensitive data isn't being exported via TLS connections.

There is no reason, however, to do this to a child's device. Their teacher and their parents should have a grasp on this, not a school IT department, third-party contractor, government or worse.