It is not black and white, as I mentioned in the post, the former employee had violations in his own developer account. But in case of our company? None!
Our company account is assumed to be "associated" with wrongdoing of my former employee. This is the black side.