I think they mean that he didn't take reasonable precautions to prevent it being hacked, but as you said that's because most users won't take those precautions

I think they mean that he didn't take reasonable precautions to prevent it being hacked, but as you said that's because most users won't take those precautions either. The intention was for this to get hacked though.