You really have to go out of your way to even set up an iDevice without any passcode protection in the first place, and you have to go out of your way to set it

You really have to go out of your way to even set up an iDevice without any passcode protection in the first place, and you have to go out of your way to set it up without any protection for app store purchases, so this is a customer who went through multiple opt-in screens to let anybody with physical access to the device buy anything on the app store they wanted, and then handed off the device to their kid... I hate predatory apps as much as the next person, and there is a lot of garbage out there, but at some point, the customer also bears responsibility for their actions.