Child can change password and disable location sharing even with parental controls

I have a child on the autism spectrum who can change his password and disable location sharing even though these function have been disabled in the parental controls. I have found that by going to settings then searching for ‘find my’ this brings up results which allow him access to these functions. It seems this is a bug, as any other route is blocked.

iPad Air 5th gen, iOS 26.1