I also do not understand how this doesn't break stuff like CFAA.
If I worked at a company and gave my work login credentials to a friend and that friend used it to access my work's network then I'm pretty sure I'd go to jail.
If I worked at a company and gave my work login credentials to a friend and that friend used it to access my work's network then I'm pretty sure I'd go to jail.
And just about everyone in the position to prosecute them actively wants this, so this is just another example of laundering the blame.