You are preaching to the choir here ... that is just the way the system works and complaining about it here will get you nowhere.
The only way to safeguard this in the future is to get an IP PIN for both of you.
