Could you:
  1. Restore rules automatically when they’re switched off or changed outside Tech Lockdown, and alert the account and accountability email when that happens.
  2. Document how solo users should keep their Cloudflare login out of reach: password, two-factor and recovery email.
  3. Consider letting Tech Lockdown hold the Cloudflare account, or a role on it, so the user doesn’t have full access.
  4. Alert the account when a remotely supervised Mac leaves device management.
Thanks. I’m happy to give more details privately.