iOS App installation controls - which method is best?

There are 3 ways through iOS 12 to control App Installation for users under age 18 (US).

Here's my list:

1. iTunes "Ask to Buy". This is not part of Screen Time, it's part of Family Sharing settings (https://support.apple.com/en-us/HT201089). I wish Screen Time had an "Ask to Install" that worked this way, but this only controls installation of apps that need to be "bought" (anything installed by family member in past will bypass this).
2. Screen Time:Content & Privacy Restrictions:iTunes & App Store Purchases:Installing Apps. This is the method recommended by Apple. It hides App Store.app. It disables app updating in addition to installation.
3. Screen Time:Content & Privacy Restrictions:Content Restrictions:Apps:Don't Allow Apps

The 3rd option is not well documented. It doesn't hide App Store.app but you can't install. In my testing with remote screen time I think bad things can happen if you use both method 2 and method 3 (broke screen time app management, but dis-enrolling and re-enrolling seems to have restored it).

Has anyone used method 3 successfully? If it allowed App Updating it would have an advantage over method 2.