*His OTR key (and, if using Pidgin, account credentials in plaintext if stored) ...

His OTR key (and, if using Pidgin, account credentials in plaintext if stored) is plainly available on the disk. You now have the private key.

Not true, actually. OTR provides perfect forward secrecy. Gaining access to the private key does not give you access to previous conversations.