This could have been an http header. It's hard to identify people, but blocking child-locked devices should be easy, since the devices can be built to cooperate.

Then it's up to parents to give their kids child-locked devices and for stores to not sell unlocked devices to kids.