Set up parental controls, kid got around them

I put time limits on my 13 year old's phone using Apple's built in controls. Caught him using his friend's iPad to play games when his own phone locked. He's also figured out how to restart his phone and it bypasses some stuff. At what point do I just trust him? Or should I go full nuclear with more advanced monitoring?