I think this was true in the 90s and 2000s. When not everyone was a script kiddie. But why hire someone that literally didn't write their own exploit? Sounds like the most advanced thing they did was just social engineering and dumping a DB.

I doubt it, these kids are never getting clearance.

I expect to find them at an MSP with a firm equal opportunities policy.