It's mostly against the rules because people could behave very shittily and then blame somebody else for accessing the account. There's no real way to hold accountability there, so people are just 100% responsible for whatever happens on their account
Am I going to get banned? I wasn't aware that he remembered my password from when I first created the account. I hadn't told him that him going on my account would affect the privacy policy.