There's a great business opportunity hidden here. This kid (or anyone else) could set up a web site where people go to scan their own network for IoT vulnerabilities. Make it like the Qualys SSL testing service: let people test for free without installing anything, but charge for additional services like repairs, enterprise service, deeper inspection, etc. If there really are so many IoT vulnerabilities out there, this should be a slam-dunk business.