I actually just used this and it didn’t work right. I’m not sure if it was super buggy or if reddit built some kind of defense against it. Maybe I messed something up but I tried following the instructions to a T. Ended up writing a small script to do it myself. Sad thing is I’m sure they have back ups (and people outside of reddit also have backups) and no way they delete all the logs.

But your advice is correct regardless, definitely the best thing you can do.

It would be so easy for them to do this. Wouldn’t be surprised at all. At the same time as long as he doesn’t use that password anywhere else it’s inconsequential right? They already own all his data.