At least it's only $2.5 million or so remaining, since the rest is now likely in assets that require more effort than merely access to this person+phone (and attempts to rob a person of assets in a bank are usually more traceable than stealing bitcoin). Still seems a bit crazy though.