It’s an abuse of power, that’s why. It doesn’t matter if it is or isn’t funny or if anybody was harmed, the act itself was improper for any engineer dealing with other peoples data and egregious lack of judgement by a CEO.