I think either of those are super plausible. There will be people where they stayed who are happy to snitch, no bugs required. On top of that, the UAE has one of the highest concentration of surveillance cameras in the world. Like 30,000 in Dubai. Throw in some facial recognition cross referenced with the list of folks on vacation or on business in the city and it's real easy to find out who is spending time together, what their ages are, and what their kids will look like.
The second one happens all the time. Happened to me when I turned 18 before my then girlfriend. Her mom threatened me with jail and all kinds of shit even though it was perfectly legal and we were only a couple of months apart. She just didn't like me or the fact that I was dating her daughter. Would have probably been worse if I had been a PoC.
It would be pretty easy (with big error bars but since when did authoritarians give a shit about that?) to set up some alerts based on facial recognition when someone under 18 (they have their passport information) is hanging out with someone over 18 who did not arrive in the same party.