I see that he hasn't snooped into Chrome at least, can never be too sure about the rest of the hard drive.
If I would want to read someone's files without them knowing about it, I would create an image of the entire drive. This can easily be done by booting a Linux LIVE OS, or by temporarily plugging the drive into another computer. You wouldn't see any of this on your file system.