Why not make him vibedeploy it, and then you hack it to prove your point?
I wasn't involved, but I heard last year they tried to vibedeploy, provisioning an AWS account in their own name with their own credit card. I let you imagine what happened and why they haven't retried this since.