If Roy doesn't care then you have a kid with an adult who gives them access, which is the scenario where none of this is going to work. Even if you required government IDs with hourly retina scans, it doesn't work if Roy is willing to let the kids hold the device up to his face whenever they want.