That would have been a better outcome, but unfortunately that is not what happened. The kid wasn’t on some altruistic journey, he hacked a company whose business is dealing with tens of millions of children’s data. Prison was not the only remedy available, and I don’t relish in the thought of sending a young person there. Could’ve been some deferred action in conjunction with a program that steered the teen back onto a track of help rather than theft.

if he didn't do it someone more malicious wouldve.

Poor argument.