[oliwarner]

You're lost. The whole basis of this discussion is that is that certain services (porn, social media) will have to AV. A kid having open network access doesn't help because they still have that interface to overcome.

Services that enable circumvention is a natural extension. Yes that means going through the same verification process you do with pornhub with your VPN host.

Completely by-the-by, your school networking experience is notably different from mine. Ours are locked down. Kids don't get access on their own devices. They whitelist domains, Google has educational filters, etc, etc. Could somebody red team their way through it? Maybe. Kids aren't.

[braiamp]

Pornhub checking my ID is pornhub's problem, not my ISP's, not my VPN's, not every other site I visit through it. A VPN isn't a porn bypass tool that happens to also do other things, it's infrastructure I run my whole connection through, and you want it gated because one of the things people use infrastructure for is something you don't like. That's not a natural extension, that's just deciding the tool itself is guilty by association.

And thanks for confirming kids can absolutely get around your locked down network, you're just betting they won't bother. So the actual plan is "trust kids not to circumvent it" for school wifi but "can't trust adults not to circumvent it" for VPNs. Pick a level of trust and stick with it.