The app store says I can do this, but I don't see any such controls in my settings menus. I'd like to download games, but I don't want him to make charges (like buying new games or purchasing points or coins).
You can put a purchase password on the google play account that is used.
Open playstore app>menu (upper left corner typically 3 lines)>settings>Require authentication for purchases.