So, what he did wrong was this: He took a great personal risk (deciding break the lock) for something that was done wrong in whatever organization this was (there was no procedure for an outage to like this) and with nothing to gain.
He should have reported the outage and the missing key, maybe recommended a suitable emergency procedure and called it a day.