I agree that is a possibility, but he probably didn't mention it because it's so remote. When you have someone's laptop with a bunch of private sexual photos, reams of PII and emails, and you can verify with witnesses and crypto that the emails check out, the rational explanation is "maybe the laptop is real" rather than "maybe Google got hacked six years ago and the extremely valuable private keys were saved for this".
That is, I do agree with you and your technical analysis, but don't see the point of nitpicking his Twitter reporting. I think if you're on Twitter, you already know that you're not getting every little detail of a story.