Messenger Kids is the common pick for that age, parents approve every contact and there is no public discovery, kids can only talk to people you allow. Apple's iMessage locked to a family group works too if everyone is on Apple. The key is parent-controlled contacts, not open sign up.