Highly recommend routing your DNS pointers on your router to 1.1.1.3 / 1.0.0.3
https://blog.cloudflare.com/introducing-1-1-1-1-for-families...
Just found out there is a huge thread on HN:https://news.ycombinator.com/item?id=22748141
Better if you get him a middle of the road Chromebook.