Assuming this incident is true, are you saying the issue was he trusted a public server which was acting maliciously and this incident could have been avoided had he been running and using his own nod...
Correct. He'd also have to trust that his own server wasn't compromised.
1