Prosecutors said he embedded code that locked out users when his account was disabled, underscoring insider‑threat risks.