Running #GrapheneOS on Pixel tablet for our little one. We admin the primary profile and add white listed apps to the child profile. No app store for them.