Couldn't agree more. If he was caught after a few hours, that's on him and security are doing their job.
3 months is a damning amount of time for the officials.
It is an another interesting example of social engineering and the ability for people to believe anyone with a badge.