Absolutely! Being related isn't enough to be sure that nothing malicious is happening. Also, without the account holder opting in, there could be things left behind they'd rather not share.