I thought of that scenario as well. If it is true I would NEVER use a "security consultant" who dismantled my organization to show how needed one was. There are always other people. Hiring someone like this only encourages more activity. Seeing the job go to someone else and, hopefully, having to deal with law enforcement for his efforts would serve as a deterent.