The more compelling case for me was William Binney's point (former Technical Director of NSA) that the timestamps in the Gucifer leak showed that the data was transferred at about the same rate as a usb stick, which was quite a bit faster than the physical connection the email server had (at that time). Basically concluding it was locally copied rather than hacked due to physically being impossible to transfer over the internet connection the server was physically connected to at that time at that speed shown in the timestamps.