This is a terrible implementation. All you needed to do was disable Macros from autorun, period, a feature you added 2+ decades ago to make things easier but now should do away with. Then we all can decide which macros we want to run and not have to fight with this whole Mark of the Beast thing you're implementing. Let us worry about it because you're not capable of security.
We don't need parental oversight, we need software that functions. Secure by Default is destroying the product. It's like having a bank app that you can't take screenshots on even though it's your info and your phone and your account. It's not on my bank to be my parent, it's not on my phone OS to be my parent, it's not on my software vendor to be my parent, it's not on my email provider to be my parent, it's on me. I trust me more than any of those groups.
Disable the right functionality and everything gets fixed much cheaper and easier than the path Microsoft is on...