Maybe companies could set up comprehensive granular APIs for managing device/store permissions and outsource the parental control software that actually manages the settings. This way a vendor is getting paid to make those settings comprehensible and effective, so they have an incentive to do it well. This would also allow conservative/overly cautious parents to buy different software than more permissive parents. So everyone gets the permission model they want.