Five steps, the same on both platforms — a couple of extra device-level steps come first on Android.
Set a 4-digit PIN you'll remember but won't enter on impulse.
Parent PIN, authenticator app, or email code. Both factors are required to unbrick — losing one doesn't lock you out forever.
Three one-time backup codes are generated. Write them down. If you ever lose your PIN and second factor, one of these codes will get you back in.
Pick exactly which apps are disabled when bricked. Everything else stays accessible.
Your chosen apps are blocked at the OS level. To unblock them, you need both your PIN and your second factor.