So I haven't completely thought this through as my kids are still too young, but I'm leaning towards doing both.

Some level of controls feels like a way to encourage exploration and learning and the "hacker" mindset. If they escape the controls, great! We also have the conversations about what's out there, how to handle it, etc.