Simpler still, a “minor” bit on the phone, set by parents once. All services must respect the bit in http headers, and app stores should refuse to install certain apps. No need for id check

I imagine that many parent don’t want micromanage their kids apps, this takes care of the problem.