Yeah, a throwaway computing device in the network closet, which he then pulled the data from over the net (or, even better, which then uploaded the data to another server) would have dramatically reduced the risk he took.
It's 20/20 hindsight, though. It's obvious from the way he behaved that he didn't think this was anywhere near as big a deal as it's turned out to be. And I might have easily made the same mistake.