It's bad enough that we can browse the contents of their server, they shouldn't be vulnerable to this. If they had anything interesting on the server, he could have gotten into it.