Comment by wccrawford

The article doesn't call it out very loudly, but...

"to a company credit card the father had saved to his own Google account, which his son also used"

It sounds like the son didn't have an account. It was just the father's account, with billing info attached with no limits.