The rules can be whatever they want them to be.

Block adult sites by default (much like a lot of phone companies already do) and the account owner can go in a make changes.

You only need one kid with a fake id that works, or for them to discover AI that can fake faces on a webcam to potentially expose all their friends...

Lazyness is a terrible excuse