I’ve configured my kids devices to use NextDNS, that way they are getting filtering no matter what network they use.

AdGuard does what I need internally, it’s just external is the issue. VPN’s are not a solution, my kids are old enough to know they can just disable it to work around it. They don’t know about the Private DNS option that I have configured on their devices… Yet