Allowlist-only / strict mode for kids' devices

For young children I'd rather flip it to allow only an approved set of sites and block everything else, instead of blocking known-bad. A strict whitelist-only mode per device would be ideal.