The point being is that plagiarism at a known private school that you pay good money for and hope to rely on, is something you will give much more consideration than sending work to a science fair to see if it will stick to a wall or not.
Neither are particularly good behaviors, but as a "computer guy" I think your public-facing API (science fair admissions) should validate its inputs. There are people out there who send know malicious requests to endpoints, you know.
Instead of blaming an underage student I'd reevaluate all of their prior nominations. Chances of dragons being there.