They'll probably agree on a settlement where they don't admit any wrongdoing and give him a decent payout, but require him to take down the site and sign an NDA or something. So they don't necessarily need to replace all of them after that

If all he wants is a refund, that should do it. But if he's more interested in warning the world, hopefully he sticks to his guns and makes them give a straight up refund