Meh, I don’t think there’s anything morally wrong with what he did. What he did wasn’t just legal, it’s literally his job. The only issue is that Valve is now angry at him for their own failing.
To continue the same analogy, they didn’t just leave the gate open, they literally invited a bunch of people and told them to invite other people. I’m not sure what they expected if not this exact situation.