I think it highly depends on the delivery. I've mentioned this in another comment lower in the thread. Basically, had he contacted Valve and informed them about

I think it highly depends on the delivery. I've mentioned this in another comment lower in the thread. Basically, had he contacted Valve and informed them about security the flaws and then shared the source code with Valve to show/prove the potential danger (instead of the guy who leaked it,) I don't think it's totally unreasonable for Valve to hire him on to the security team after he truly demonstrates skill and passion for the company.