He was duped by a con man. Everyone is susceptible to SE, even smart guys like Brian. A case can be made that it is the most difficult challenge/vector in cyber security.
Seems more like he was willfully played and that Ubiquiti lawyers can show negligence on his part which would not be a good look for a security researcher.