Trained weights on pulic data don't have a copyright in most countries, they have to keep them a trade secret to protect them. As long as he didn't agree to the terms and acquired them through a leak he should be OK (not legal advice).
Also "Stable Diffusion" is a registered trademark so there's a possible infringement there too.