He would not be liable at all. He can do what he wants. Especially when audit firm recommends it. Then he's technically off the hook