Apps have cert pinning. What now?

Websites have public key pinning. [1] HPKP Most sites don't do this any more but enough do that anyone running a Squid SSL Bump MitM proxy needs to know.

[1] - https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning

And do you block children from accessing any of them?

Which of them specifically are you asking about?