I would be inclined to downmod this, but instead I have to agree with the sentiment of 'fences not walls' when it comes to security, since too much security can be a bad thing.
Mr. Frakes is being kind enough to give us a glimpse of forehead-slapping. If anything, the REAL 4th conclusion: write down the stuff you do that involves _locking you out of your machine_
the point is that even if he had had NO trouble himself, anyone wanting to get his data was just one search on the intrawebs away of find a really easy way of getting it.