How can I whitelist applications for users?
Under Screen Time there's a setting called "Downtime", it's for specifically for white-listing apps and you could schedule it by day. Any new apps introduced will be blacklisted by default, at least that's the way it works on iOS.