Gotta say, I agree with the comments on Hacker News here, pretty floored Google seems apathetic on this one.

Kids will find this, now that it’s out there on the internet explicitly claiming to bypass parental controls, and someone will exploit that opportunity to forcibly set new encryption keys on their device.

Not that it’s a massive risk or anything, but it’s non-zero.