Its secure enough for the average person. If your friend was a big deal, super rich or powerful and a massive target it would be easy enough to figure out.

I doubt it would be worthwhile trying to crack that particular code for the average joe.