I agree, it sounds as though they are "reeducating" him into a white hat and not necessarily hiring him on as a employee. It would surprise me if they actually hired him right now because he had set up a phishing scam. It is good though that they are working with him vs throwing the book at him especially for one so young.