Basically, CSAM is too radioactive for common sense.
"But a kid seeing a nipple isn't illegal here"
"Doesn't matter, it's illegal in 'Merica, so to simplify things, it's now illegal wherever Google operates "
I guess it's payback for the EU cookies banners. /s
"We are Google. We don't give a fuck."
Therefore, this account and all the data contained is already gone. The most they could do is allow him to create a new account with the same name, but to my knowledge that isn't supported technically in their systems (too many bugs to be found by re-using unique identifiers).
Changing this would probably be a huuuuge undertaking, since every Google product would have to be modified to expect email addresses might be reused for a new account. And some products are in maintenance/bugfix only mode, so those products would probably have to be sunsetted if the changes were too invasive.
That's why they stand by their decision - they don't currently have the capability to implement any other option.
Can someone explain what Google's logic is? At this point [after the news articles], clearly humans are involved at Google, clearly they know this is not child porn, so why not reinstate the account and move on?