Im not suggesting you hack your friend's account.
However, if you did some how get access what type of "evil" pranks would(have) you pull(ed)?
-
I once took my friend's main to the islands south of Kalimdor and deleted his hearth stone. I was nice enough to leave his poor paladin a water walking potion.