Assuming, of course, that the kid has his page settings on private (so only people he's "friended" can see what's there) AND he doesn't "friend" people he doesn't know.

People really need to be smarter about that sort of thing.

Make your page private...don't "friend" people you don't personally know. In fact, if someone you don't know tries to get access to your page with a friend request, you can block him or her. Full blocking means that as far as that person is concerned, you don't even exist on Facebook.