The moral of Aaron's death is not that everything should be legal. As snarfy pointed out, he granted access to systems of a "critical infrastructure" company without any idea who would gain access. This is and should be criminal, as widespread economic and human damage could possibly result if these critical systems went down.

I say this as someone who recently had to spend two weeks without electricity and running water in New York City.