A dummy can tape the floppy together and do slow scan, you have to incinerate the floppy with a soldering iron or torch, that is the only good anti forensic, FreeDOS not MS-DOS ...

You have a point, there is always the possibility of social engineering attacks, so never give any credentials, if the user does give credentials, they can trick the company into giving other credentials ...