He removed allergy information. He was willing to harm or maybe even kill someone for the purpose of damaging Disney financially and reputationally.

In that case - yeah I guess at least 3yrs is suitable