do you run a full node? I think If your wallet was encrypted then they sent it via rpc calls.
Yes, full node, but how can he removed all my blockchain files later?
Do you live your entire life on you Macbook, including doing your banking transactions?
You should also assess what information was lost with their access to your computer. Then take steps to ensure that you don't stand to lose anything else in addition to your coins.
People should be treating their computer with a wallet or even day trading off the internet as much as possible. My banking computer is only connected to do transactions. I have another one for trading. You dont need a fancy computer for your bank, just no surfing and no emails.