Parental controls on devices are not hard because they are intrinsically hard. The companies just do not care about them, because nobody has forced them to be implemented sensibly. There is absolutely zero reason an Android device could not have a shiny button saying "Kid's device" when you set it up and never need configuring again. So this is not a criticism of the approach, and only a criticism of the companies.