True, but nonetheless hilariously bad mistake.
Really, this is only a security threat to your tech savvy gf/bf/friend/thief since it requires physical access. And you know what they say anyway:
Law #3: If a bad guy has unrestricted physical access to your computer, it's not your computer anymore