Does the law really require third party? Because having on-device functions configurable by parents doesn’t seem terrible at all.

That's not what the UK is demanding. They want client side scanning malware that breaks DRM, circumvents encryption and VPNs, and bypasses other security features in order to scan everything visible on your screen.