...or it makes him post the letter on the internet and makes the company look bad. Amicable solutions frequently make more practical sense than confrontational ones.

I don't understand why it would look bad that the company is trying to recover what belongs to them.

The kid refusing to give up the password definitely puts him in the wrong.

The company firing the kid for being efficient, then threatening him afterwards looks bad, regardless of what the law says.