User agent flags? Those are some of the easiest to spoof. Wouldn't last 10 minutes.

No, there is hardware based attestation, and it could be set by an administrator / parent for the user account.

That doesn't really matter if something like more than 95% of time it's followed. Compared to now where there is nothing.