I have parental controls setup on my son's iPod and installing apps requires my consent.  However, he's now been shown by a friend how to install Tweakbox by installing a profile (doesn't require parental consent).  That in turn bypasses the iOS controls and gives him access to install anything...