I don't know, I think transferring it was the reasonable thing to do, rather than leaving it in the compromised wallet.
It's like if you find someone's (real) wallet, and you pick it up and contact the owner to ask where to drop it off. Rather than leaving it there and just telling the owner what street corner it's on.