You have it correct. The idea is to allow the new guy to use the wireless network to access the internet, but to wall off his computers and their traffic from the new guy. It's not that he doesn't trust the new roommate. He has to do it for fiduciary reasons.
Thanks for all the suggestions guys. I've encouraged him to explore the guest network option.