Two wrongs don't make a right. Don't even
try to put the two in the same sentence.
One can take issue with a few of Andy's speculations, and even with the lack of sense to use an actual password - but they pale in comparison to signing on as someone else (and then sharing that information with a friend).
And there is still a lingering question to some, on whether Naomi simply tried "name-name" the first time to gain access...or whether she previously saw "name-name" somewhere.