> Could've done something good with his life (like getting into info/cybersec!).

Very likely no, he could not. Being able to harm people does not imply ability to secure systems. Nor ability to learn advance tech while we are at it. Nor ability to obey contractual limits if you are red team.

And it would be pretty idea to employ person with such a bad judgement in any of those positions anyway.