Back in my day, my peers and I just had unfettered root (well, admin) access to our machines. I dunno if it's realistic to protect kids from all the things anyway. Whatever you shield them from is just going to seem even more appealing, and no doubt their friends will find it for them if they really want it.
Setting things up for a 6 year old who wants to watch YouTube videos (hint, install FreeTube) is different than setting things up for a 16 year old.