Hello @MamabearMT
So, here's what's going on, as best I can explain it. Every device has a long number it uses to identify itself to the network – the "MAC address". There are about 100 trillion unique numbers, give or take, and devices come from the factory with these numbers built in. When a device connects to a network, this number is how the network distinguishes that device from the other devices currently connected. When you put devices into groups for pausing purposes, they are being grouped by their MAC addresses.
Here's the problem: on many devices, it's possible to change the MAC address, making the device look like a new or different device than it used to be, and therefore no longer part of the group you put it in. There isn't much the network can do about this, since it's being done on the device itself.
This is why I find using the pause groups more useful for only younger children. For someone "clever", a completely technical solution may not be feasible. But, I did find that using the device-side tools from operating system vendors to be more effective. Things like Microsoft Family and Apple Screen Time work at the device level to impose limits in a way that is at least more difficult to get around than just changing the MAC address.
