Even if that's all true, and even if Apple has good reasons to lock his account, why not just tell him the reason? I don't understand why tech companies have this passive aggressive attitude when users violate their rules of witholding information and giving some vague canned responses when asked about what's going on. Just tell him what happened in detail.