Nothing really exists.

The likely extreme thing I did was setup ManageEngine’s MDM+ (free for<25 users) and put my sons phone on a “device profile” which locks it down. It’s decently intuitive, but does require a “server” so there’s a bit of setup too. I use YT at work too so for me it was done in 30 minutes.