Set a default parental control profile that applies to all devices, then override for a few?

It seems every router has parental controls implemented backward.  I'm fairly certain that the vast majority of households that use parental controls want nearly all devices locked down, and only a few of the parents' devices to be exempt.

They also want new devices joining the network, or devices that they simply forgot to add (gaming console, smart TV, VR headset, Nintendo DS, old phone in the junk drawer, etc.), to be covered by the parental controls by default.

Why do no routers allow for a default profile for unmanaged devices?  Does NetGear/Circle have a solution for this?

Cheers!