This is incredibly sad and scary. What a complete waste of time, effort, and resources. This is a wake up call to everyone to apply for GCMS notes after 4+ months, no matter how confident you are about your application (I think it even makes sense to apply for it multiple times).
Here is my question though. If he was rejected due to Security screening as some have speculated above, do you think it would have shown up on the GCMS notes? As far as I understand, the Security portions are usually redacted. Moreover, what can really be done from the applicant's side to fix Security issues? I wish he would give us more insight into why his application was rejected once he cools down, as this would be immensely helpful to the community.