Similar to how I’d protect young children: get them an iPad, pre-install essential apps, whitelist some web domains, and require your authorization for any new app installs or domain whitelisting. You’ll find that their web browsing actually is limited to a few domains, and they should never learn to bank, etc. outside the apps.