we'll be able to have a conversation about it

That is all you really have. Conversation. Trust.

Everything else is pretending their peers don’t have internet access. Pretending your child isn’t clever. Isn’t an autonomous person.

Every bit of time you spend shopping for solutions, spend writing code, spend configuring firewalls is time you don’t spend on your peer to peer relationship with your child. Time you don’t spend building trust. Time you don’t spend talking.

Ten years old is about the end of reliable “because I said so” parenting. Good luck.

When I was in university, there were a whole bunch of people who "gooned" and failed exams. Most were from conservative families and were not given any internet access whatsoever. They never built the "antibodies" for the wild wild web.

I do restrict my kids' phone access, but often it's with discussion. I tell them I'm shutting down their phone access. Usually when they don't do their homework or when they start getting emotional. They'll build the self control muscle. And when they find the hard stuff, they'll be a little more prepared.

I think this is the way... OP is already doing the things that can be done.

You could try to educate more on how to do things right instead of trying to block anything that might freak her out, e.g. searching for pictures only on curated sites like pixabay.

However, basic filtering (adblock, kagi, DNS filter), trust and communication are the only things required in my opinion...