Not necessarily. One of the first format string exploits was created by a 16 year old. Luca Todesco provides a constant stream of iOS issues since 17, I believe. I'm sure there are younger hackers around.
Are you arguing that <string.h> isn't shit? ;)
Today it is. In '90s it's what we had.
Yeah... Most of personal systems suck, especially old people's personal systems... Like in this case, it's their own personal emails got hacked. Director probably don't even know how to setup 2 factor authentication and using the same password everywhere. One service got hacked, he's name and email is on the list with password. It happens clearance process is not well protected even today. So, yeah, its shit, it's just too easy... Then again, don't do it if you don't want to get caught. There are pretty good security "avengers" as well.
that's not the way you need to look. that 15yrs kid might be the most brilliant kid. Age and Talent are not related.