If you don't want to change OS. Simply creating a non-admin account and installing ad-blockers will go a long way. Tell them most software on Internet have virus so install is blocked. Also enable remote desktop on all.
Edit: For some issues like airplane mode, see if you can remove them from quick access.
Edit: For some issues like airplane mode, see if you can remove them from quick access.