HarmBlock+, marketed as the world's safest smartphone for children, contains critical security flaws that undermine its core safety claims. A researcher examined the device over 12 months and found architectural failures in its AI content filter, including a password reset vulnerability that allowed attackers to hijack parental accounts and a QR code pairing system using predictable IMEI numbers instead of cryptographic secrets.