BabySafe. Pay the gentlemen. It’s really the only safe way to put your laptop in the hands of the kid. It protects your data (although your screen is still a bit exposed).
And why you want to put the mac in the hands of your kid? Well, it’s warfare. My wife prefers Windows, and I prefer UNIX and Mac in particular. So we have to win the kid when he’s young.