Post by @jorijn
Setting up a desktop computer for the 12-year-old son. The cat/mouse game has begun.
My opening move: separate VLAN, content filtering, scheduled internet access, blocked VPN/proxy traffic, locked-down NetworkManager, no sudo.
His opening move will probably be discovering MAC randomization before dinner.
I give it three weeks before this turns into a red-team exercise.