As someone else pointed out just feigning incompetence would’ve worked too. Just connect to his account for idk ‘logging’, throw an error if it doesn’t exist (who would’ve tested for that right) and crash the application that way and everyone would’ve shaken their head and said “good thing we laid him off” instead of going after him legally