The XNU kernel has great network filtering capabilities, and any modern OS can filter traffic on the kernel level. Apple could force all third-party browsers to use an entitlement that simply designates them as a browsing application, and then extend the firewall/screen time rules to those apps. It's not rocket science, content blockers have been doing this since the early 2000s.