Add a spending limit to your child's Microsoft account — they can only spend what you've allowed. No surprise charges, no unauthorised app purchases.