If they didn't even read the auction, they aren't going to do anything other than click "send payment".
Once he emails them the password, he's off the hook as far as ebay is concerned. The auction clearly states it is an email address and nothing more.