Probably not illegal, you are required to act "in the best interests" of the person. From experience with another family member who gave an outsider POA, even malicious POA actions are very difficult to attempt to prosecute.