Well, I unfortunately failed.

Do they install DNS filters locally on the machines at all?

No, the kids are allowed to bring their own laptops, because some rich parents insisted on their kids using MacBooks. I tried pushing Linux for the kiddo, but turns out whatever CISCO wifi system the school is using actively blocks Linux (including, for some reason, black listing the arch repos). A lot of stuff is blocked — though easily bypassed by VPNs or the wireguard router proxy I set up — by wifi black lists, including random stuff like duckduckgo and dict.cc

Actually, I did get an ad for a vibrator on dict.cc once, so maybe that makes sense after all. I, a man. Not sure what I’d use it for.

I’m unfortunately not a parent, just a relative, so there is only so much I can do to harass the school about it. I also live abroad, so 🤷 — I try though.