Yeah 100%, the family members could give contact info for those they think are vulnerable and you can as you say 'pen test' them.