I agree, it's not generally the smartest thing to do, but that doesn't give him the right to compromise her accounts like that. If anything, he needs to encrypt his network. Either way, I'd like to help her get her stuff back. And perhaps change the asshole's router password or something after setting encryption on it so he can't use his own router.