1.) It might be apathy. My network was unencrypted for quite a while, though from what Mantra told me Aim passwords are Md5 encrypted, so I doubt whoever this was he got her password from her Aim account. I guess she uses the same password for aim as she does for other things.
2.) She's 2 and a half years older than me. She's in college. However, I do have a credit card...