What's the precedent in cases like these? Tech companies obviously have to care about their security, but it just seems a bit ridiculous that the boy will be pe

What's the precedent in cases like these? Tech companies obviously have to care about their security, but it just seems a bit ridiculous that the boy will be persecuted and sentenced in the circumstances that he's in. (age, blind passion for Apple, etc.) Aren't there examples where the hacker gets a job at the company for discovering vulnerabilities?