Where Each Layer Fails

None of the four layers is complete. Their gaps are different, which is why they are worth combining, and knowing each gap is more useful than trusting any of them.

Network filtering

Fails outside the house: mobile data, a friend's wifi, school, a coffee shop.

Fails against a VPN, which is an app install away.

Can be bypassed by encrypted name resolution in the browser unless the router blocks it.

And covers adults too, which produces the household friction.

Good for: young children at home, and devices with no controls of their own.

Device and account controls

Fail on a factory reset, which is the standard teenage circumvention and takes minutes.

Fail on a second device: an old phone in a drawer with wifi still works.

Ratings are coarse and do not describe in-app chat.

Web restriction may apply only to the default browser.

Good for: install and purchase control, time limits, and consistent settings across a child's devices.

App store controls

Fail against apps installed by other means — a friend's account, sideloading on some platforms, or a web version of the same service.

Fail when the child knows the approval password, which happens quickly if it is typed in front of them.

And ratings change, so an approved app can become something else.

Good for: spending, which they do very well.

Service settings

Fail when the child changes them, which they can unless the account is a supervised child account.

Fail on a new account, which takes two minutes to create with a different email.

Reset in updates.

And cover only that service, so a new app means a new set.

Good for: contact risk, which nothing else addresses.

The pattern

Each layer covers what another misses.

Network covers devices that have no controls. Device controls travel. Store controls handle money. Service settings handle people.

Which is why the answer is layers rather than a product, and why a household with all four in a basic state is better protected than one with an expensive single tool.

The gaps nothing covers

A friend's device, which is where a large share of first exposures happen.

A second-hand phone with no account attached.

School and library devices, governed by somebody else.

And anything the child is shown rather than seeks, which is most of what actually reaches younger children.

These are conversation problems and there is no setting for them, which is worth being honest about rather than buying more software.

What to check

Pick each layer in turn and name its gap for your household.

Test one: take a child's device off the home wifi and see what changes.

Find the old devices in the house and decide what they are for.

And ask what would happen if the child did a factory reset, which for most families is the honest answer to how strong the arrangement is.

What this changes

Knowing each layer's gap turns four partial measures into an arrangement.

It also stops the false confidence that comes from having set one thing up thoroughly and nothing else at all.

The check

Ask what would happen if your child did a factory reset.

For most households that is the honest measure of how strong the arrangement is.

The honest position

A household with all four layers in a basic state is better protected than one with a single expensive tool.

And knowing the gaps means the conversation covers what the settings cannot, which is the arrangement this collection describes throughout.

Worth knowing

The gap nothing covers is a friend's device, which is where a large share of first exposures happen. That is a conversation rather than a configuration, and it is the reason the conversation appears in every note here.

One more thing

Test one gap rather than reading about it: take a device off the home wifi and see what stops working. The answer is usually more than expected.