It would seem if a 11year old can do what he did in 10 minutes the entire weight of an enemy countries cyber war fare department could do a little be more.

No, changing the memory of a local machine is night and day different from changing the data on a secured server. Zero-day exploits for servers are very rare, and very expensive. Server exploits are patched constantly and very quickly. Assuming the election server is up to date and configured correctly, it's nearly impossible to remotely change data on it.

Most "hacks" where an agent is able to remotely change data are done through human manipulation and phishing, where admin credentials are compromised.