Shame they trusted information they read in a web browser rather than verifying it on an independent offline device....
The average bitcoiner pleb with a single air-gapped signing device has better security.
It was a rookie error, helped by the overly complex nature of Ethereum.