This is 100% an Apple thing, and it sounds like the kid simply changed the password to override the iOS parental restrictions.
What does one action have to do with the other?
This is part of why Roblox, Microsoft, and Epic pay Apple 30% of platform transactions to handle things like this.