Sure. All he did was a social engineering by sending people an email asking for their password. There is no indication that he is actually technically competent.