If someone gives out their password, and not change it for over a year, and someone else gets into their account, whose fault is it?
I think it`s the fault of the one who gave out the password. If they are that dumb, they are just asking for trouble.
For example, if a policeman doesn`t stop...