There's a thin line between by-the-books malicious compliance "throw away all the keys" and "intentionally destroyed company property". You'd sure want "please

There's a thin line between by-the-books malicious compliance "throw away all the keys" and "intentionally destroyed company property". You'd sure want "please delete all our information from your personal devices" in writing. I can imagine a company whose business is impacted by intentional deletion of data by an aggrieved ex-employee could make a convincing case in a civil suit, even if criminal charges don't stick.