I need to set up a phone that will allow the user access to installed apps but will not allow them to install new apps. In addition I need to allow access to only a whitelist of websites. These constraints need to be unbreakable short of a factory wipe. My thought regarding privacy was to have a superuser account that the user and administrator each have half of the password, so the administrator can't get on the phone without the permission of the user.
I'm kind of desperate here. I asked this question twice on r/androidroot and both times people told me to just install apps that "reward good behavior" etc. We're way past that point. The user really needs email, text, maps, and a few work related apps (plus definitely some apps like Habitica to reward good habits!).
I haven't rooted a phone before but am fairly technically proficient. If Tasker is any part of the solution I'm pretty handy with that, otherwise I will do or learn anything necessary to make this happen. I have a google pixel to work with but if absolutely necessary will get a different phone.
Thank you very much for any help you're able to provide! p.s. the disorder is a pretty strong Executive Function disorder - despite 18 years of therapy with 6 different people the user is basically unable to build good habits or demonstrate much willpower. It's been pretty devastating for them.