>He should have accepted their offer of 10% as a bug bounty.

If I was in his shoes I wouldn't trust them. They can just try to put me on jail anyways.