Can "hosts" file be locked?

Why not just set up a virtual PC and let him look at whatever he wants? Personally, I’d be more concerned about protecting the computer from malware than protecting the boy from boobies.