I wouldn't sue, that's up to legal. None of what he suggested would even work in my environment. You'd be fired for moving company information out of our controlled environment if you cloned the drive, tampering if you replaced it.

All they'd need to do is tell me, and I'd get them a laptop with an SSD.

I cannot have lone wolves like that hanging around. They have the potential to do far more damage than someone from the outside.