I never really understood the need for that strickt controll of the hardware

Federal laws and rules for educational technology:

CIPPA - https://www.fcc.gov/consumers/guides/childrens-internet-protection-act

COPPA - https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa

and to an extent

FERPA - https://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html