I am trying to restrict the ability for my child to access recovery mode on mac to keep filtering software in place. On intel macs you can set a firmware passcode that is separate from the admin user account passcode (which I do want child to have access to).
Apple seems to have started to address this missing feature with M1 Macs here: https://developer.apple.com/documentation/devicemanagement/set_recovery_lock_command
My question is, can someone help me figure out how to actually implement this on an individual machine without an MDM server?
Or alternatively - I'm mainly wanting to restrict the ability to boot into safe mode specifically. So if anyone has any ideas on how to do that - that would be helpful as well.