Maybe that would work too, but “this device has a child lock turned on” seems like reasonable information to send? It’s a lot better than having to check ID’s.
Ok but I bet that's easy enough to classify the receiving browser behavior when it gets some rating value from the webserver and it cannot show certain content to user because parental control (i.e. it's not going to do more requests from the same browser fingerprint)