This is almost certainly not the best way to do it, but it's what worked for me.

Following this guide Set up initial account as child account

• Log into the kid account

• $ sudo adduser parents
  $ sudo usermod -aG sudo parents

• Log into parent account
• To check groups, run groups [parents]

• $ sudo adduser parents adm
  $ sudo adduser parents cdrom
  $ sudo adduser parents lpadmin
  $ sudo adduser parents plugdev
  $ sudo deluser danielle sudo

• Log into parent account

• $ sudo apt-get update
  $ sudo apt-get install emacs
  $ sudo apt-get install ktouch

• Log into parent account
• add DNSStubListener=no in /etc/systm/resolved.conf.
• add dns=none in [main] section of /etc/NetworkManager/NetworkManager.conf.
• <May have to replace /etc/resolv.conf with nameserver 127.0.0.53 (be careful to save a backup of the original symlink)>
• $ sudo systemctl restart NetworkManager
  • Optionally can check if this has removed systemd-resolved from listening on port 53 with sudo ss -lp "sport = :domain"
• $ sudo apt-get install dnsmasq

May need to set up dnsmasq to start at boot, not sure

• Log into parent account
• Get the wifi interface name by running ifconfig and parsing output, should be something like wlan0 or wlx...
• add the following to /etc/dnsmasq.conf:

  domain-needed
  bogus-priv
  log-queries
  log-facility=/var/log/dnsmasq.log
  no-resolv
  interface=[INTERFACE NAME FOUND IN PRIOR STEP]
  
  server=/google.com/8.8.8.8
  server=/mozilla.org/8.8.8.8
  server=/mozilla.com/8.8.8.8
  server=/bitwarden.net/8.8.8.8
  server=/github.com/8.8.8.8
  <etc>