Compound needs to just eat the loss like any other platform if they had an exploit. It's a risk of doing business in the crypto/defi lending space. If people give it back, that's good on them, but in a sea of legit competitors, all he will do is permanently sink the platform by threatening people and throwing a tantrum about it.