That is probably how it's done all day every day. I have a friend in government IT who told me that no matter what level of government people are at, they break security protocol all the time because nothing ever happens anyway. Seriously you could probably waltz into whatever state house is closest to you, find some politician's computer, get their entire email archive, and leave without anyone noticing.