For everyone who's poo-poohing this, go read the government's brief (https://arstechnica.com/wp-content/uploads/2017/02/fedsrawls...). There are logs that show him visiting child pornography groups, there are recorded requests of him accessing files whose hashes matched child pornography, his sister says he showed her child porn and told his entire family that he had a problem with child pornography, and he admitted that he may have been emailed child pornography.

Now, replace child pornography with any other thing. Would you question me saying that he'd been downloading that thing?