To be honest, considering the role they’re applying for, I would reject their job application too even if it occurred inside a sandboxed environment.

They should know exactly what rm -rf does. The fact they didn’t and they still arbitrary ran the command anyway… massive red flags. Could even say he failed to twart a social engineering attack.