This has nothing to do with Bungie as this is a problem with the Microsoft XBL account.
For cross save you need to validate that account for security reasons to stop account theft (which you can understand why).
Bungie can not/will not help you or your friend.
English
-
Sounds like a long way for them to say "his account got permabanned on XBL for hacking"