I’m not sure what you mean - the fact we assume malicious intent is in fact a guard against prior gullibility which was exploited by bad actors.

You get betrayed enough, and you stop acting from a position of implicit trust. If folks want to go back to the days when trolling was the default assumption, then we collectively need to punish bad actors to discourage further betrayals.

It was directed at the people theorizing and speculating seemingly missing the possibility that it was just a troll.

Not acting on information you're being fed by a troll is itself a guardrail against manipulation. We don't know if the bad actor ever provisioned any hardware and actually spent the money he claims. All we've seen is words and a slopcoded website.