Webpages on Photon / SoftAP

I am just lending them sensor devices so they can view the results of the sensors.
None of my friends want to get into programming this, even if some of them are
capable they just want to try the sensors out.

Friend 4 : Are you saying that anyone can install the Spark App and they will be able to
put the device in listening mode and change the wifi credentials ? I assumed
the device would not allow anyone except the person who owns the cores to
change the credentials ?