They can really only think in front of them. If I put information into this program, I get information out. They don't think that applications can monitor their own meta-state. Or the state of other applications.
So I'm not terribly surprised that he thought running the engine in another browser window would have been sufficient. He might have even had it open in "incognito mode". And since it's incognito, it can't be detected, right?
