Most likely, the tool to upload the firmware from the bootloader required some sort of hardware signing key, which was present within the tool that he wasn’t supposed to use without permission.