Kid easily bypassed control- how to prevent VPN from being disabled?

You can if the devise is in supervised mode using a Mac or ABM with an MDM. Profiles can then be installed in at state they can’t be removed.

You can block most common VPN connections on the DNS so it connect to them. GitHub - hagezi/dns-blocklists: DNS-Blocklists: For a better internet - keep the internet clean!

Although go to Home Screen would leave the settings open and you can just navigate back to it ( double tap home button) so maybe shut down?

Then to actually do settings like update, you’d have to deactivate the automation?

You can try to navigate back to it but it will still close.

To get in and do anything you have to turn the automation off yes.

I just tried this! Truly Brilliant! Thank you

You got it my man. I do this with my son for the same reasons. Just hide the shortcuts app so he won’t think to look there and you’re good