Yes, not doing due diligence on a recruiter and company is dumb.

Downloading an unapproved program on your work station is dumb.

Not putting it in a sandbox is dumb.

This dude was dumb, at least at this specific moment in time.