Neither of us are lawyers; we are not qualified to have a discussion of which laws he violated. I am pointing out that - ignoring the legality of what he did (I suspect the response might involve suspicions of keyloggers present in the his code, because I'm a bit paranoid) - your argument makes no sense.