Long story, short version: If you don't want your 16½ year old son to be able to make such changes to the computer - even thought the computer belongs to him, you son should not have Administrative privileges.
Your User Account, on the other hand, should have Administrative privileges.
IMHO a 16½ year old should not have unsupervised access to a computer which has access to the internet - yes, even with Family Safety/Parental Controls enabled. The computer should be located in a common area of your home but not in your son's bedroom.
Here's some additional information for you:
Keep your kids safe in Windows 10
https://www.cnet.com/how-to/keep-your-kids-safe...
How to Setup Family Safety in Windows 10:
https://www.groovypost.com/howto/setup-family-s...
How to Add and Monitor a Child’s Account in Windows 10:
https://www.howtogeek.com/225323/how-to-add-and...
PS: Chances are your 16½ year old son knows way more about computers & parental controls than you or me. Good luck!