Well, the school of our kids blocks a lot of urls. Now they play the games via some url that goes like https://unblocked.something.something. These kids are not crazy.
An allowlist might be a good place to start.
Could any of the IT professionals, here, think of a way around it? Then likely the kids could.