Well, get them to install AppleSafe™, which will give them the curated Apple experience by locking out all sideloading, and requires them to call Apple and go through menus in order to remove it.
This works for me. I trust Apple a lot more than I trust some third party rando and I enjoyed watching Facebook whine about losing data tracking revenues and whiplash into Meta on their way to more people discovering that the world can live without them.
