If you are not in favor of the punishment, change the law. Until that happens, it is what it is and judges don’t get to change it.
Keys gave credentials to a known hacking group. He had to know what they would do with them. That is a criminal act. He doesn’t get off based on what happens to other people, or the fact that other people are equally or more culpable in this case, or on what your opinion is of what the law ought to be.
You want to change it? Do the hard work necessary to change it. You want to just gripe and do nothing? Then you’re like the guy at the end of the bar, banging his glass on the table and shouting about what this country needs.