Besides him up/downloading music/ illegal porn etc, is there any security risks involved.

Will he be able to look around in the various other devices connected to the router?

It is WPA2-PSK authentication if that makes a difference.

Tx