This is exactly what I do. Works pretty well. I've never needed to restrict the play store. I just tell them not to use it.