Or just do what I do. Sign up for game pass once in a blue moon when friend wants to play games. Cancel it after 1-2 months once friend eclipses into non gaming mode for a while. Dispute the charge on card and say MSFT didn’t cancel trial. Get money back every time. Rinse and repeat as needed.
That adding an exclamation mark to your password doesn’t make it secure, GREG!