It is sad for sure, he is clearly very skilled but because it doesn't fit into the framework of the national curriculum for computer science or IT he is getting bad grades. It just goes to show that grades aren't everything, I just hope he can apply those skills and make it in the industry doing legitimate work not malicious work. Some employers are quite good at seeing past grades so fingers crossed for him!