Germany has very lax sentencing. for $2 billion I would just do the time. I am still guessing it was unprotected file on desktop. Probably the criminals kept the only copy of keys on a thumb drive , which when confiscated meant they had no choice but to comply.