They could have kept the hot wallet req multisig to move coins, then backed it up somewhere else so even deletion wouldn't be a problem. It's all the low hanging fruit getting fleeced Bitcoin protocol offers plenty of safeguards if you use it