Give him the benefit of the doubt, but try and urge him to stay offline with the hack? I mean, if he's a nice enough guy and not a moron, just point out he could lose his account etc. What I'm trying to say is: get him off the hacking, not get him more interested.