I call script kiddie, since he doesn't seem to know enough about server maintenance to know how to alter a password without a GUI. So, I can only assume he didn't make the script himself (and he's 16, so that's kinda implied).
Anywho, what is he scared of? Legal repercussions?